UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

No description provided by source. UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions

UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible...

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...

CVE-2008-6970

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...

Sql injection

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...

CVE-2008-6970

CVE-2008-6970 affects UBB.threads 7.3.1 and earlier, via dosearch.inc.php. The vulnerability is an SQL injection in the Forum[] array parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected file/parameter and the resulting imp...

CVE-2008-6970

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...

CVE-2008-6970: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...

UBBCentral UBB.Threads 5.5.1 - 'message' SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered https://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the databas...

Infopop UBB.Threads Admin Credentials via SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the database...

UBB.threads 'Forum[]'数组SQL注入漏洞

BUGTRAQ ID: 31074 CNCAN ID：CNCAN-2008091108 UBB.threads是一款基于PHP的论坛程序。 UBB.threads搜索功能存在SQL注入攻击，远程攻击者可以利用漏洞获得敏感信息或操作数据库。 问题存在于dosearch.inc.php // The forums we are searching will be in a different format // depending on where we are coming from if @isarray$POST'Forum' $Forum = join",",$POST'Forum'...

UBBCentral UBB.Threads 7.3.1 - Forum[] Array SQL Injection

UBBCentral UBB.Threads 7.3.1 - Forum Array SQL Injection source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection

source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CVE-2007-1956

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter...

CVE-2007-1956

The CVE-2007-1956 entry describes an SQL injection in ubbthreads.php of Groupee UBB.threads

CVE-2007-1956

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter...

CVE-2007-1956: Undefined Security Weakness

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter...

ubb-sql.txt

UBB.threads SQL Injection Vulnerability The variable 'C' in UBB.threads is susceptible to SQL injection. Vulnerability: http://target.com/ubbthreads.php?Cat=cat&C=' Vulnerable: UBB.threads = 6.1.1 Google d0rk: allintitle:"Forums powered by UBB.threads" John Martinelli [email protected]...

UBBCentral UBB.Threads 6.1.1 - 'UBBThreads.php' SQL Injection

source: https://www.securityfocus.com/bid/23369/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...