Lucene search
+L

611 matches found

Exploit DB
Exploit DB
•added 2005/03/11 12:00 a.m.•97 views

phpBB 2.0.12 - Session Handling Authentication Bypass

phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.txt ..located on "C:\Documents and...

7.5CVSS5.8AI score0.0755EPSS
SaveExploits3
zdt
zdt
•added 2005/03/11 12:00 a.m.•149 views

phpBB <= 2.0.12 Session Handling Authentication Bypass (tutorial 2)

Exploit for unknown platform in category web applications =================================================================== phpBB = 2.0.12 Session Handling Authentication Bypass tutorial 2 =================================================================== phpBB 2.0.12 Session Handling...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2005/03/11 12:00 a.m.•20 views

phpBB 2.0.12 - Session Handling Authentication Bypass

phpBB 2.0.12 - Session Handling Authentication Bypass phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2-...

0.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2005/03/11 12:00 a.m.•31 views

phpBB &lt;= 2.0.12 Session Handling Authentication Bypass (tutorial 2)

No description provided by source. phpBB 2.0.12 Session Handling Authentication Bypass .. easy to use exploit .. YOU DON'T HAVE TO REGISTER AT THE VICTIM'S FORUM.. 1- Simply VISIT the forum using Mozilla Firefox.. and be sure that the cookie is made : 3- Close the Browser .. 2- Open the cookies.t...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2005/03/05 12:00 a.m.•44 views

phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial)

Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application Data\Mozilla\Firefox\Profiles\profile.default\cookies.txt -- search the .txt for the domainname domain.tld...

5.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2005/03/05 12:00 a.m.•26 views

phpBB &lt;= 2.0.12 Session Handling Authentication Bypass (tutorial)

No description provided by source. 1. Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application Data\Mozilla\Firefox\Profiles\profile.default\cookies.txt -- search t...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2005/03/05 12:00 a.m.•22 views

phpBB 2.0.12 - Session Handling Authentication Bypass (tutorial)

phpBB 2.0.12 - Session Handling Authentication Bypass tutorial 1. Register at forum? 2. Log in with account + UNCHECK "Log in automatically" 3. Close browser to be sure a cookie is made. 4. Locate cookie firefox: X:\Documents and Settings\Name\Application...

0.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2005/03/02 12:00 a.m.•38 views

GLSA-200503-02 : phpBB: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-02 phpBB: Multiple vulnerabilities It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the...

6.4CVSS6AI score0.02043EPSS
SaveExploits0References4
Gentoo Linux
Gentoo Linux
•added 2005/03/01 12:00 a.m.•56 views

phpBB: Multiple vulnerabilities

Background phpBB is an Open Source bulletin board package. Description It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the "Enable remote avatars" and "Enable avata...

6.4CVSS6.6AI score0.02043EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2005/02/28 12:00 a.m.•196 views

phpBB <= 2.0.12 Multiple Vulnerabilities

The remote host is running a version of phpBB that suffers from a session handling flaw allowing a remote attacker to gain access to any account, including that of an administrator. Also, there is a path disclosure bug in 'viewtopic.php' that can be exploited by a remote attacker to reveal...

7.5CVSS5.5AI score0.0755EPSS
SaveExploits3References3
securityvulns
securityvulns
•added 2002/01/15 12:00 a.m.•49 views

Некорректная работа с идентификаторами сеансов в PHP4 &#40;session spoofing&#41;

Идентификаторы сеансов хранятся в директории /tmp...

0.5AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder