Lucene search
+L

317 matches found

zdt
zdt
added 2008/11/05 12:0 a.m.20 views

phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln

Exploit for unknown platform in category web applications ============================================================= phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln ============================================================= /...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/11/05 12:0 a.m.38 views

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

/ -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On http://www.phpbbhacks.com/load.php?id=1595 NOTE: Works...

7.5CVSS5.8AI score0.00973EPSS
SaveExploits2
exploitpack
exploitpack
added 2008/11/05 12:0 a.m.19 views

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages / -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

0.3AI score
SaveExploits0
Prion
Prion
added 2008/10/09 6:0 p.m.12 views

Improper access control

ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

5CVSS6.7AI score0.01205EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2008/10/09 4:0 p.m.19 views

CVE-2008-4512

ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

6.2AI score0.01205EPSS
SaveExploits0References3
CVE
CVE
added 2008/10/09 4:0 p.m.59 views

CVE-2008-4512

The CVE-2008-4512 entry concerns an ASP/MS Access Shoutbox (likely v1.1 beta) that stores the database file db/shoutdb.mdb under the web root with insufficient access control. This misconfiguration allows remote attackers to retrieve sensitive information via a direct request. The underlying root...

5CVSS6.2AI score0.01205EPSS
SaveExploits0References3Affected Software1
securityvulns
securityvulns
added 2008/09/30 12:0 a.m.67 views

shoutbox Remote Password Disclouse Vulnerability

shoutbox Remote Password Disclouse Vulnerability Ghost Hacker , Real Hack Back Author : Ghost Hacker My Home : http://Real-h.com Real Hack Back Contact Me : [email protected] Bug : Remote Password Disclouse From : Kingdom Saudi Arabia Name Script : shoutbox Download :...

1.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/07/31 12:0 a.m.28 views

shoutbox-database.txt

shoutbox Remote Database Dawnload Exploit Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| HomePage : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : shoutbox Download :...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2008/07/30 12:0 a.m.66 views

shoutbox Remote Database Dawnload Exploit

shoutbox Remote Database Dawnload Exploit Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| HomePage : http://gh0st10.wordpress.com | o/ o | My Email : [email protected] |/ / | Name Script : shoutbox Download :...

0.9AI score
SaveExploits0
Prion
Prion
added 2008/02/14 12:0 a.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

4.3CVSS6.2AI score0.01223EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2008/02/14 12:0 a.m.18 views

CVE-2008-0775

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

4.3CVSS5.8AI score0.01223EPSS
SaveExploits0References6
securityvulns
securityvulns
added 2008/02/12 12:0 a.m.2506 views

Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS

Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/02/11 12:0 a.m.31 views

smfsb-xss.txt

Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...

7.4AI score
SaveExploits0
Prion
Prion
added 2007/12/10 6:46 p.m.24 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...

4.3CVSS5.7AI score0.011EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2007/12/10 6:46 p.m.15 views

CVE-2007-6298

Cross-site scripting XSS vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages...

4.3CVSS5.3AI score0.011EPSS
SaveExploits1References5
CVE
CVE
added 2007/12/10 6:0 p.m.45 views

CVE-2007-6298

CVE-2007-6298 : A cross-site scripting (XSS) vulnerability exists in the Shoutbox module for Drupal 5.x through 5.x-1.1, allowing remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Impact is limited to pages rendering the affected block; the issue is du...

4.3CVSS5.3AI score0.011EPSS
SaveExploits1References5Affected Software1
Drupal
Drupal
added 2007/12/05 12:0 a.m.17 views

SA-2007-032 - Shoutbox - Cross site scripting

Message sent from the Shoutbox block, where visitors can quickly post short messages, are not properly sanitized in a number of cases. This allows malicious users to inject arbitrary HTML and script code into the block. Learn more about cross site scripting on Wikipedia. Versions affected Shoutbo...

6.4AI score
SaveExploits0References5
Prion
Prion
added 2007/11/15 12:46 a.m.18 views

Design/Logic Flaw

blocks/shoutboxblock.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field...

7.5CVSS7.2AI score0.01547EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2007/11/15 12:46 a.m.24 views

CVE-2007-5988

blocks/shoutboxblock.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field...

7.5CVSS6.7AI score0.01547EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2007/11/15 12:0 a.m.38 views

CVE-2007-5988

blocks/shoutboxblock.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitrary users via a modified nick field...

6.7AI score0.01547EPSS
SaveExploits0References6
Rows per page
Query Builder