360 matches found
D2-Shoutbox 4.2 IPB Mod - load SQL Injection
D2-Shoutbox 4.2 IPB Mod - load SQL Injection !/usr/bin/perl | | | \ | | |/ D2-Shoutbox 4.2IPB Mod=SQL injection Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered By D2-Shoutbox 4.2" use IO::Socket; $host = $ARGV0; $user = $ARGV2; $uid = $ARGV3; $pi...
EV0055.txt
New eVuln Advisory: Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities http://evuln.com/vulns/55/summary.html --------------------Summary---------------- eVuln ID: EV0055 CVE: CVE-2006-0605 CVE-2006-0606 Software: Shoutbox Sowtware's Web Site: http://www.unknowndomain.co.uk/...
[eVuln] Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities
New eVuln Advisory: Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities http://evuln.com/vulns/55/summary.html --------------------Summary---------------- eVuln ID: EV0055 CVE: CVE-2006-0605 CVE-2006-0606 Software: Shoutbox Sowtware's Web Site: http://www.unknowndomain.co.uk/...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...
Sql injection
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2006-0606
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2006-0605
Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...
CVE-2006-0605
CVE-2006-0605 concerns Unknown Domain Shoutbox 2005.07.21 and describes multiple input validation flaws enabling remote attackers to inject arbitrary code via the Handle or Message fields. The linked sources indicate two vulnerability classes: cross-site scripting (XSS) and SQL injection, arising...
CVE-2006-0606
The CVE-2006-0606 entry concerns a SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 that allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Affected software is Shoutbox (Unknown Domain). The root cause is improper handling of user-supplied inpu...
CVE-2006-0606
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2006-0593
Cross-site scripting XSS vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the 1 shoutname field in shoutboxpanel.php and the 2 comments field in commentsinclude.php...
CVE-2006-0605: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the 1 Handle or 2 Message fields...
CVE-2006-0606: Undefined Security Weakness
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
[SA18759] Unknown Domain Shoutbox Two Vulnerabilities
TITLE: Unknown Domain Shoutbox Two Vulnerabilities SECUNIA ADVISORY ID: SA18759 VERIFY ADVISORY: http://secunia.com/advisories/18759/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Unknown Domain Shoutbox 1.x...
PHP-Fusion 6.0.106 - BBCode IMG Tag Script Injection
/ ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a function a normal member cannot do. For...
PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit
Exploit for unknown platform in category web applications ============================================================= PHP-Fusion deluser ./fusionimg banuser ./fusionimg delshout ./fusionimg deladmin is the PHP-Fusion version. enter 6.x or 5.x depending on the version number. is the start point ...
PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit
No description provided by source. / ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a functi...
shoutbox302.txt
-=--------------------ADVISORY-------------------=- -= =- -= Shoutbox SCRIPT = 3.0.2 =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: Shoutbox SCRIPT -=+ Version: 3.0.2 and prior -=+ Vendor's URL:...
CVE-2005-1713
Serendipity 0.8 is affected by multiple XSS vulnerabilities described in CVE-2005-1713, exploitable via the templatedropdown and shoutbox plugins. The Red Hat and NVD entries corroborate that remote attackers could inject arbitrary web script or HTML through these plugins, enabling client-side sc...