Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHORUM 5 arbitrary local inclusion exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "This forum powered by Phorum."\n\n"; / works with: registerglobals=On...

CVE-2006-3249

SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating "If a non positive integer or non-integer is used for the page parameter for a search URL, th...

CVE-2006-3249

CVE-2006-3249 describes a SQL injection in Phorum 5.1.14 and earlier via the search.php page parameter. Affected component: Phorum’s search function; root cause: improper handling of the page parameter, enabling arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL commands. V...

CVE-2006-3249

SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the vendor has disputed this report, stating "If a non positive integer or non-integer is used for the page parameter for a search URL, th...

PT-2006-4143 · Phorum · Phorum

Name of the Vulnerable Software and Affected Versions: Phorum versions 5.1.14 and earlier Description: A SQL injection issue in the search.php file allows remote attackers to potentially execute arbitrary SQL commands via the page parameter. However, the vendor disputes this report, stating that...

JVN#76207423 Phorum cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected Phorum 5.1.13 and earlier...

CVE-2006-3053

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttppath parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of...

CVE-2006-3053

PHORUM 5.1.13 and earlier suffer a PHP remote file inclusion via the PHORUM[http_path] parameter in common.php. The issue allows remote PHP code execution and is supported by multiple sources, which state the affected component is common.php and PHORUM 5.x series. The vendor disputes the existenc...

CVE-2006-3053

PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttppath parameter. NOTE: this issue has been disputed by the vendor, who states "common.php is checked on the very first line of...

PT-2006-3958 · Phorum · Phorum

Name of the Vulnerable Software and Affected Versions: Phorum versions 5.1.13 and earlier Description: A remote file inclusion issue in common.php allows remote attackers to execute arbitrary PHP code via a URL in the PHORUMhttp path parameter. However, the vendor disputes this issue, stating tha...

Phorum register.php Cross-Site Scripting

The remote version of Phorum contains a script called 'register.php' which is vulnerable to a cross-site scripting attack. An attacker may exploit this problem to steal the authentication credentials of third party users. OpenVAS Vulnerability Test $Id: phorumregisterxss.nasl 8022 2017-12-07...

Phorum < 5.0.18 XSS Vulnerability

Phorum contains a script called SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phorum:phorum"; ifdescription...

CVE-2006-1152

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1151

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

CVE-2006-1151

Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter...

CVE-2006-1152

PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1152

CVE-2006-1152 affects M-Phorum 0.2. The issue is a PHP remote file inclusion in index.php where an attacker can include arbitrary files through the go parameter. According to the NVD entry, the vulnerability has a CVSSv2 base score of 5.0 (Medium) with network attack vector, low complexity, no au...

CVE-2006-1151

CVE-2006-1151 is a cross-site scripting vulnerability in M-Phorum 0.2, exploitable via the go parameter in index.php. The NVD entry notes an injected script/HTML and a CVSS2 base score of 5.0 (MEDIUM) with network access, no authentication, and partial integrity impact (I:P). Affected component: ...