3860 matches found
Ultimate PHP Board <= 2.0 (header_simple.php) File Include Exploit
Exploit for unknown platform in category web applications ================================================================== Ultimate PHP Board = 2.0 headersimple.php File Include Exploit ================================================================== ? print ' ::::::::: :::::::::: ::: :::...
Dove gray ultimate free kill tutorial-vulnerability warning-the black bar safety net
To this station also quite a few days, learned a lot of knowledge. Here today, I also want to talk about yourself tofree to killperception. A week ago,I dofree to killby Kabbah, rising, Kingsoft, Norton, etc. files and memory. I'm very excited about thefree to killmethod in the online publication...
CVE-2006-3203
The installation of Ultimate PHP Board UPB 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges...
CVE-2006-3206
register.php in Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "NR" sequence in the signature field, which is used to separate multiple records...
CVE-2006-3208
Direct static code injection vulnerability in Ultimate PHP Board UPB 1.9.6 and earlier allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified "configuration fields" in 1 adminchatconfig.php, 2 adminconfigcss.php, 3 adminconfig.php, or 4 adminconfig2.php,...
CVE-2006-3207
Directory traversal vulnerability in newpost.php in Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot sequence and trailing null %00 byte in the id parameter, as demonstrated by injecting a Perl CGI script using "NR" sequences in the...
CVE-2006-3204
Ultimate PHP Board UPB 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext by obtaining the plaintext password, which is sent when logging in, and the...
CVE-2006-3203
The CVE-2006-3203 vulnerability affects Ultimate PHP Board (UPB) versions 1.9.6 and earlier, where a default administrator login and password exist. This root cause enables remote attackers to gain privileges (high impact) without authentication. Affected component: UPB installation process inclu...
CVE-2006-3206
register.php in Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "NR" sequence in the signature field, which is used to separate multiple records...
CVE-2006-3207
CVE-2006-3207 : Affected product is Ultimate PHP Board (UPB)
CVE-2006-3207
Directory traversal vulnerability in newpost.php in Ultimate PHP Board UPB 1.9.6 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot sequence and trailing null %00 byte in the id parameter, as demonstrated by injecting a Perl CGI script using "NR" sequences in the...
CVE-2006-3208
CVE-2006-3208 affects Ultimate PHP Board (UPB) up to version 1.9.6. The issue is a direct static code injection vulnerability that allows remote authenticated administrators to execute arbitrary PHP code via multiple configuration fields stored in admin_chatconfig.php, admin_configcss.php, admin_...
CVE-2006-3203
The installation of Ultimate PHP Board UPB 1.9.6 and earlier includes a default administrator login account and password, which allows remote attackers to gain privileges...
PT-2006-4098 · Upb · Ultimate Php Board
Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue concerns a default administrator login account and password included in the installation of the software, allowing remote attackers to gain privileges. Recommendations:...
PT-2006-4099 · Upb · Ultimate Php Board
Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to determine a suitable decryption key given the plaintext and ciphertext. This is achieved by obtaining the plaintext password, which is sent wh...
PT-2006-4100 · Upb · Ultimate Php Board
Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote attackers to gain access by modifying certain parameters in a cookie. These parameters, including user env, pass env, power env, and id env, can be exploit...
PT-2006-4103 · Upb · Ultimate Php Board
Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.9.6 and earlier Description: The issue allows remote authenticated administrators to execute arbitrary PHP code via multiple unspecified configuration fields in admin chatconfig.php, admin configcss.php, admi...
CVE-2006-3153
Cross-site scripting XSS vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...
CVE-2006-3155
Multiple cross-site scripting XSS vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 item parameter in a emailtofriend.pl or b violation.pl, 2 seller parameter in c vsoa.pl, 3 user parameter in d userask.pl or e leavefeed.pl...