phpBB 2.0.3 search.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6311/info phpBB is vulnerable to cross site scripting attacks. This is due to insufficient santization of user-supplied input. The problem is located in the search.php script. This issue may be exploited by an attacker to...

phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability

No description provided by source. phpBB 3 autopost bot mod = 0.1.3 Remote File Include Vulnerability Vulnerability author: Kacper Greetz: all DEVIL TEAM forum members. Author Website: http://devilteam.pl/ http://polskihacking.pl/ Mod Description: This mod automatically post content from RSS feed...

phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit

No description provided by source. / phpBB = 2.0.18 XSS Cookie Disclosure Proof of Concept -- 'the html is on exploit' original exploit by: cXIb8O3 - 12/16/2005 proof of concept by: jet -- http://jet.carbon-4.net/ develop a pure, lucid mind, not depending upon sound, flavor, touch, odor, or any...

phpBB <= 2.0.10 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; @@@@@@@ @@@ @@@ @@@@@@ @@@ @@@ @@! @@@ @@! @@@ !@@ @@! @@@ @!@!!@! @!@ !@! !@@!! @!@!@!@! !!: :!! !!: !!! !:! !!: !!! : : : :.:: : ::.: : : : : phpBB = 2.0.10 remote commands exec exploit based on...

phpBB <= 2.0.17 (signature_bbcode_uid) Remote Command Exploit

No description provided by source. !/usr/bin/perl phpBB = 2.0.17 remote command execution exploit need for work: 1. PHP 5 5.0.5 2. registerglobals=On 3. magicquotes off ------------------------------------------------ coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 03.11.05 use...

PHPBB-Auction Module 1.0/1.2 Auction_Offer.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13284/info phpbb-auction module is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Securi...

Blend Portal <= 1.2.0 (phpBB Mod) Remote File Inclusion Vulnerability

No description provided by source. Blend Portal = 1.2.0 for phpBB 2.x Remote File Inclusion Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Blend Portal = 1.2.0 for phpBB 2.x Original advisory can be found at:...

phpBB 1.x/2.0.x Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9942/info It has been reported that phpBB may be prone to multiple vulnerabilities that could allow an attacker to carry out SQL injection and cross-site scripting attacks. These vulnerabilities result from insufficient...

phpBB Minerva Mod <= 2.0.21 build 238a SQL Injection Vulnerability

No description provided by source. ======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

Auction <= 1.3m (phpbb_root_path) Remote File Include Exploit

No description provided by source...

phpBB 2.0.3 privmsg.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6634/info A SQL injection vulnerability has been reported for phpBB2 systems that may result in the deletion of all private messages. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used...

phpBB 2.0.x Viewtopic.PHP PHP Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10701/info The 'viewtopic.php' phpBB script is prone to a remote PHP script injection vulnerability because the application fails to properly sanitize user-supplied URI parameters before using them to construct dynamicall...

phpBB Plus <= 1.53 (phpbb_root_path) Remote File Inclusion Vuln

No description provided by source. AUTHOR = Mehrad Ansari Targhi E-Mail : [email protected] My Yahoo Messenger ID : mehrad1989 Script Download URL : http://www.phpbbplus.net/PhpBBPlus1.53.zip This Is A RFI Bug . This Bug Is In : PHPBBPLUS INSTALLED /language/langgerman/lang mainalbum.php Explo...

phpBB Links MOD 1.2.2 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl print q phpBB = 2.0.22 - Links MOD = v1.2.2 Remote SQL Injection Exploit Bug discovered by Don Dork: allinurl:links.php?t=search or: Links MOD v1.2.2 by phpBB2.de SQL INJECTION: Exploit:...

PHPBB 2.0.13 Linkz Pro Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13030/info The Linkz Pro mod for phpBB is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

phpBB Shadow Premod <= 2.7.1 - Remote File Include Vulnerability

No description provided by source...

phpBB 1.x Page Header Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3167/info An input validation error exists in phpBB, a freely available WWW forums package. The problem is due to improper validation of some variables in phpBB. It is possible for users registered with the phpBB system t...

phpBB <= 2.0.19 (user_sig_bbcode_uid) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L admin -P password...

phpBB Chart Mod 1.1 charts.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly...