45 matches found
CVE-2007-1633
Directory traversal vulnerability in bbcoderef.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log...
CVE-2007-1633: Undefined Security Weakness
Directory traversal vulnerability in bbcoderef.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log...
PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork:...
phpnukesplat-lfi.txt
!/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork: "Splatt Forum" Discovered & Coded ...
CVE-2005-3282
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
CVE-2005-3282
CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...
CVE-2005-3282
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
CVE-2005-3282: Undefined Security Weakness
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
CVE-2003-1547
Cross-site scripting XSS vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter...
CVE-2003-0590
Cross-site scripting XSS vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon imagesubject field...
Splatt Forum 34 - Post Icon HTML Injection
Splatt Forum 34 - Post Icon HTML Injection source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML...
Splatt Forum 3/4 - Post Icon HTML Injection
source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML code. As a result, a malicious user may ha...
Multiple Vulnerabilities in Splatt Forum 4.0
=========================================================================== ==== FRAME4 SECURITY ADVISORY FSA-2003:001 --------------------------------------------------------------------------- ---- PRODUCT : Splatt Forum 4.0 for PHP-Nuke 6.0 PRODUCT/VENDOR URL : http://www.splatt.it/ TYPE :...
PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Splatt Forum 'Search' function. As a result of this...
PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting
PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Spla...
PHP-Nuke Splatt Forum 4.0 Module - HTML Injection
PHP-Nuke Splatt Forum 4.0 Module - HTML Injection source: https://www.securityfocus.com/bid/7484/info A problem with Splatt Forum could allow remote users to execute arbitrary code in the context of the web site running the Splatt Forum module. The problem occurs due to the lack of sanitization...
PHP-Nuke block-Forums.php subject vulnerabilities
The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...
PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure
PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the...
PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure
source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the information gathered in this manner to mount further...