167 matches found
UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting
UBBCentral UBB.Threads 7.5.6 - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...
UBBCentral UBB.Threads 7.5.6 - 'Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/51275/info UBB.threads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...
UBB.threads 6.4.4 forum xss Vulnerability
Exploit for php platform in category web applications ========================================= UBB.threads 6.4.4 forum xss Vulnerability ========================================= ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Title : UBB.threadsâ„¢ 6.4.4 forum xss Vulnerability ! Author :...
UBB.threads 6.4.4 Forum Cross Site Scripting
Title: UBB.threads™ 6.4.4 forum xss Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Title : UBB.threads™ 6.4.4 forum xss Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL...
UBB.Threads 6 Remote File Inclusion
..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb:::: ::::d8:::::::::::indoushka:::::::::::8b::::...
UBB.threads v6 RFI Vulnerability
Exploit for unknown platform in category web applications ================================ UBB.threads v6 RFI Vulnerability ================================ ------------------------------------------------------------------------- Author : indoushka Script : powered by UBB.threads, Version 6...
UBB.threads v6 RFI Vulnerability
No description provided by source. ..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb::::...
UBBCentral UBB.Threads 6.0 - Remote File Inclusion
..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb:::: ::::d8:::::::::::indoushka:::::::::::8b::::...
UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...
UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions
UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities
No description provided by source. UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...
UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions
UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible...
CVE-2008-6970
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...
Sql injection
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...
CVE-2008-6970
SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the Forum array parameter...
CVE-2008-6970
CVE-2008-6970 affects UBB.threads 7.3.1 and earlier, via dosearch.inc.php. The vulnerability is an SQL injection in the Forum[] array parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected file/parameter and the resulting imp...
UBBCentral UBB.Threads 5.5.1 - 'message' SQL Injection
Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered https://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the databas...
Infopop UBB.Threads Admin Credentials via SQL Injection
Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the database...
UBB.threads 'Forum[]'数组SQL注入漏洞
BUGTRAQ ID: 31074 CNCAN ID:CNCAN-2008091108 UBB.threads是一款基于PHP的论坛程序。 UBB.threads搜索功能存在SQL注入攻击,远程攻击者可以利用漏洞获得敏感信息或操作数据库。 问题存在于dosearch.inc.php // The forums we are searching will be in a different format // depending on where we are coming from if @isarray$POST'Forum' $Forum = join",",$POST'Forum'...
UBBCentral UBB.Threads 7.3.1 - 'Forum[]' Array SQL Injection
source: https://www.securityfocus.com/bid/31074/info UBB.threads is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...