CVE-2008-6727

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2008-6727

CVE-2008-6727 describes a cross-site scripting (XSS) vulnerability in Ultimate PHP Board (UPB) versions up to 2.x, specifically 2.2.2 and 2.2.1 (and earlier 2.x). The issue arises from accepting the User-Agent HTTP header without proper sanitization, enabling a remote attacker to inject arbitrary...

CVE-2008-6727

Cross-site scripting XSS vulnerability in Ultimate PHP Board UPB 2.2.2, 2.2.1, and earlier 2.x versions allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Ewebeditor2. 8. 0 Ultimate Edition delete arbitrary file vulnerability-vulnerability warning-the black bar safety net

Author: oldjun This vulnerability can very tasteless, it can be fatal, the key to see how you use! This vulnerability is present in Example\NewsSystem directory delete. asp file, which is ewebeditor test page, without the login you can go directly to, to see these code: 'The band"|"the string...

CmsFaethon 2.2.0 SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

EleCard MPEG PLAYER (.m3u file) Local Stack Overflow Exploit

!/usr/bin/perl By ALpHaNiX NullArea.Net THanks EAX 00000000 ECX 41414141 EDX 775A104D EBX 00000000 ESP 0012C280 EBP 0012C2A0 ESI 00000000 EDI 00000000 EIP 41414141 system"color 5"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename n"; $file = $ARGV0; print "n Xn"; print " XEleCa...

EleCard MPEG Player Stack Overflow

!/usr/bin/perl By ALpHaNiX NullArea.Net THanks EAX 00000000 ECX 41414141 EDX 775A104D EBX 00000000 ESP 0012C280 EBP 0012C2A0 ESI 00000000 EDI 00000000 EIP 41414141 system"color 5"; if @ARGV != 1 exit; sub help print "X Usage : ./exploit.pl filename \n"; $file = $ARGV0; print "\n X\n"; print "...

[BMSA-2009-01] Authentication bypass in Interspire Shopping Cart v4.0.1 and below

BLUE MOON SECURITY ADVISORY 2009-01 =================================== :Title: Authentication bypass in Interspire Shopping Cart :Severity: Critical :Reporter: Truong Van Tri and Blue Moon Consulting :Products: Interspire Shopping Cart v4.0.1 Ultimate edition :Fixed in: v4.0.2 Description...

LinksPro Ultimate Edition SQL Injection

--------------------------------------------------------- Portal Name: LinksPro Ultimate Edition Vendor : http://www.codefixer.com/applinkspro/ultimate.asp Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL ---------------------------------------------------------...

Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit

No description provided by source. !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board = 2.2.1 log inj Privilege Escalation Exploit ------------------------------------------------------------------ by athos - stakerathotmaildotit download on...

Ultimate PHP Board 2.2.1 - Privilege Escalation

Ultimate PHP Board 2.2.1 - Privilege Escalation !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID +...

Sql injection

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...

CVE-2008-4666

SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the Category parameter...

CVE-2008-4666

CVE-2008-4666: A SQL injection vulnerability exists in Ultimate Webboard 3.00 (webboard.php) allowing remote attackers to execute arbitrary SQL via the Category parameter. This is documented in multiple sources (NVD entry with CVSS v2 base score 6.8, Attack Vector: Network, Privileges Required: N...

Unfixed Redirect vulnerability at ultimate-guitar.com

Security researcher MrDoug, has submitted on 22/10/2008 a Redirect vulnerability affecting ultimate-guitar.com, which at the time of submission ranked 537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is currently unfixed. If y...

CVE-2008-4510

Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service page fault and system crash via multiple attempts to access a virtual address in a PAGENOACCESS memory page...

Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Ultimate Webboard 3.00 Category SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

Ultimate Webboard 3.00 (Category) SQL Injection Vulnerability

No description provided by source. ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...

Ultimate WebBoard 3.00 - Category SQL Injection

Ultimate WebBoard 3.00 - Category SQL Injection ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...