UltraBoard 1.6 - Denial of Service

source: https://www.securityfocus.com/bid/1175/info UltraBoard 1.6 and possibly all 1.x versions and the new beta Ultraboard 2000 are vulnerable to this Denial of Service attack. A remote user is able to expend all of the available resources of the webserver by using a specially-devised request t...

UltraBoard 1.6 - Denial of Service

UltraBoard 1.6 - Denial of Service source: https://www.securityfocus.com/bid/1175/info UltraBoard 1.6 and possibly all 1.x versions and the new beta Ultraboard 2000 are vulnerable to this Denial of Service attack. A remote user is able to expend all of the available resources of the webserver by...

Fun with UltraBoard V1.6X

hola friends, found some interesting things in the "old" UltraBoard-Forum scripts UltraBoard V 1.6 class:Input Validation Error remote:Yes vulnerable:UltraBoard V1. vendor: www.ultrascripts.com || www.ub2k.com Description: By using the good old NullByte000 its possible to open "any" file on the...

Проблемы с UltraBoard

Используется скрипт перл, в котором не комментируются некоторые мета-символы. Используя нулевой символ можно получить любой файл с сервера. Кроме того, можно вызвать бесконечный fork в приложении, что вызовет DoS против системы...

CVE-2000-0332

UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that includes a dot dot .. and ends with a null byte...

ultrascripts ultraboard 1.6 - Directory Traversal

ultrascripts ultraboard 1.6 - Directory Traversal source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Window...

ultrascripts ultraboard 1.6 - Directory Traversal

source: https://www.securityfocus.com/bid/1164/info UltraBoard 1.6 and possibly all 1.x versions is vulnerable to a directory traversal attack that will allow any remote browser to download any file that the webserver has read access to. On Windows instalations, the file must reside on the same...