SoftBB 0.1 - 'Page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19847/info SoftBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

SoftBB v0.1 < = Cross-Site Scripting

SoftBB v0.1 = Cross-Site Scripting - XSS Exploit ; Discovred By : ThELeOMor0Ccan Islam DefenDers Team ; Software : SoftBB ; Version : 0.1 ; Site Of Software : Www.Softbb.Be ; Exploit : http://Www.Site.Com/Script/index.php?page=scriptalert'hacking20xss'/script ; Greetz : M.I.D.TDrackanZ, Mr.IlysS ...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= SoftBB 0.1 cmd Remote Command Execution Exploit ================================================= !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code...

SoftBB 0.1 - cmd Remote Command Execution

SoftBB 0.1 - cmd Remote Command Execution !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......:...

SoftBB 0.1 - 'cmd' Remote Command Execution

!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...

CVE-2006-1327

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

Sql injection

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

CVE-2006-1327

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

CVE-2006-1327

CVE-2006-1327 describes an SQL injection vulnerability in SoftBB 0.1, exploitable through reg.php via the mail parameter, allowing remote execution of arbitrary SQL commands. Affected component: SoftBB 0.1 (reg.php). Root cause: improper neutralization of user input in the mail parameter leading ...

CVE-2006-1327: Undefined Security Weakness

SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter...

[SA19283] SoftBB "mail" SQL Injection Vulnerability

TITLE: SoftBB "mail" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19283 VERIFY ADVISORY: http://secunia.com/advisories/19283/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: SoftBB 0.x http://secunia.com/product/8782/ DESCRIPTION: A vulnerability has...

SoftBB 0.1 - 'mail' Blind SQL Injection

!/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT pseudo,mail FROM '.$prefixtable.'membres...

SoftBB 0.1 (mail) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== SoftBB 0.1 mail Remote Blind SQL Injection Exploit ==================================================== !/usr/bin/env python LOTFREE TEAM 03/2006 Vulnerability info Product : SoftBB...

SoftBB 0.1 - mail Blind SQL Injection

SoftBB 0.1 - mail Blind SQL Injection !/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT...

SoftBB 0.1 (mail) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/env python LOTFREE TEAM 03/2006 http://lotfree.next-touch.com/ http://membres.lycos.fr/lotfree/sploits/LOTF-SoftBB.py Vulnerability info Product : SoftBB Version : 0.1 The field 'mail' in reg.php is used directly in a SQL query : $sql = 'SELECT...