CVE-2008-0471

CVE-2008-0471 concerns phpBB 2.0.22 where a CSRF flaw in privmsg.php enables an attacker to delete a user’s private messages via a crafted request (deleteall). Public sources confirm the vulnerability in phpBB2 and note remediation through Debian updates (DSA-1488-1) and corresponding fixes in si...

CVE-2008-0471: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages PM as arbitrary users via a deleteall action...

phpbb2022-xsrf.txt

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code Vuln Versions: I've tested...

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code html head /head body...

Debian: Security Advisory (DSA-925-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

osdata-lfi.txt

========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability

No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osData 2.08 Modules Php121 - Local File Inclusion

osData 2.08 Modules Php121 - Local File Inclusion ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro ,...

Sql injection

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

CVE-2007-6223 describes an SQL injection in garage.php of phpBB Garage 1.2.0 Beta3. The vulnerability allows remote attackers to manipulate the database by injecting SQL through the make_id parameter in a browse-mode search action, potentially impacting data confidentiality, integrity, and availa...

phpbbgarage-sql.txt

Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

CVE-2007-6223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability

No description provided by source. Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB Garage 1.2.0 Beta3 - SQL Injection

phpBB Garage 1.2.0 Beta3 - SQL Injection Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability =========================================================== Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection...

phpBB Garage 1.2.0 Beta3 - SQL Injection

Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

PHPBB links.php Remote SQL Injection

No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...

phpBB links.php SQL注入漏洞

phpBB 是一款基于PHP的WEB应用程序。 phpBB 不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是links.php脚本对用户提交的cat参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 http://www.phpbb.com/ http://sebug.net/exploit/2589/...