Lucene search
+L

2196 matches found

Packet Storm
Packet Storm
added 2008/11/06 12:00 a.m.27 views

phpbbmodsmall-editdelete.txt

/ -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On http://www.phpbbhacks.com/load.php?id=1595 NOTE: Works...

7.4AI score
SaveExploits0
zdt
zdt
added 2008/11/05 12:00 a.m.21 views

phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln

Exploit for unknown platform in category web applications ============================================================= phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln ============================================================= /...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/05 12:00 a.m.39 views

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

/ -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On http://www.phpbbhacks.com/load.php?id=1595 NOTE: Works...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits2
exploitpack
exploitpack
added 2008/11/05 12:00 a.m.19 views

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages / -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

0.3AI score
SaveExploits0
seebug.org
seebug.org
added 2008/10/25 12:00 a.m.23 views

phpBB v1.4.2 远程用户修改SQL查询缺陷

phpBB v1.4.2及以前版本存在一个缺陷,远程用户可能修改SQL查询串。 该问题出在“bbmemberlist.php”中,问题代码如下:switch$sortby case '': ... case 'posts': ... $sql = SELECT FROM users WHERE ... ORDER BY $sortby ;如果用户提交的“$sortby”变量不在这些值中的话,就会被直接插入SQL查询串中,这 可能存在一些潜在的安全隐患。 v1.4.2及以前版本 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商 的主页以获取最新版本:...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.19 views

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.7AI score0.02043EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.7 views

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.22 views

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.8AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.15 views

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.22 views

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

6.4CVSS0.1AI score0.02043EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.40 views

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.5AI score0.72096EPSS
SaveExploits14
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.44 views

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.72096EPSS
SaveExploits14References3
OpenVAS
OpenVAS
added 2008/09/24 12:00 a.m.18 views

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.85366EPSS
SaveExploits11References3
NVD
NVD
added 2008/09/18 5:59 p.m.19 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

5CVSS6.3AI score0.01631EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2008/09/18 5:59 p.m.35 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

5CVSS5.9AI score0.01631EPSS
SaveExploits0References1
CVE
CVE
added 2008/09/18 5:47 p.m.53 views

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...

5CVSS6.3AI score0.01631EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2008/09/18 5:47 p.m.23 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

6.2AI score0.01631EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.14 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID cfe17ca6-6858-4805-ba1d-a60a61ec9b4d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.10 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.12 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS7.2AI score0.01457EPSS
SaveExploits1References2
Rows per page
Query Builder