simpgbSQL.txt

Hi, The PHP guestbook SimpGB 1, written by Boesch IT-Consulting 2 can be exploited to gain userdata. The quote variable isn't checked carefully in simpgb/include/gbnew.inc called by guestbook.php. I wrote a proof of concept which shows a md5 hash and the username, read from the database...

Aztek Forum 4.0 - 'myadmin.php' Database Dumper

/ Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50 Ubuntu PHP/4.3.8 X-Powered-By: PHP/4.3...

CubeCart < 2.0.5 Multiple Vulnerabilities

The version of CubeCart on the remote host is vulnerable to a local file include issue, along with related cross-site scripting and path disclosure issues, due to a failure to sanitize user-supplied data. Successful exploitation of this issue may allow an attacker to execute arbitrary code on the...

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities

Mono 1.0.5 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12626/info It is reported that Mono is prone to various cross-site scripting attacks. These issues result from insufficient sanitization of user-supplied data and aris...

GLSA-200501-45 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-45 Gallery: XSS vulnerability Rafel Ivgi has discovered a cross-site scripting vulnerability where the 'username' parameter is not properly sanitized in 'login.php'. Impact : By sending a carefully crafted URL, an attacker...

MercuryBoard 1.1.1 - SQL Injection

little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/ milw0rm.com 2005-02-12...

[PersianHacker.NET 200502-05] WWWoard passwd

Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final WWWBoard is a threaded World Wide Web discussion forum and message board, which allows users to post new messages, followup to existing ones and more. The current release in 2.0 ALPHA 2.1, which means there still are a...

MyBB member.php 'uid' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...

horde -- XSS vulnerabilities

A Hyperdose Security Advisory reports: Horde contains two XSS attacks that can be exploited through GET requests. Once exploited, these requests could be used to execute any javascript commands in the context of that user, potentially including but not limited to reading and deleting email, and...

ZeroBoard < 4.1pl5 Multiple Remote Vulnerabilities

The remote host runs ZeroBoard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting and remote script injection due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute...

Important: Red Hat Security Advisory: php security update

Updated php packages that fix various security issues and bugs are now available for Red Hat Enterprise Linux 3. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Flaws including possible information disclosure, double free, and negative reference index arr...

WordPress 1.2.11.2.2 - link-manager.php Multiple Cross-Site Scripting Vulnerabilities

WordPress 1.2.11.2.2 - link-manager.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper...

WordPress 1.2.11.2.2 - link-add.php Multiple Cross-Site Scripting Vulnerabilities

WordPress 1.2.11.2.2 - link-add.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper...

WordPress Core 1.2.1/1.2.2 - '/wp-admin/post.php?content' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress Core 1.2.1/1.2.2 - 'moderation.php?item_approved' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress 1.2.11.2.2 - link-categories.php?cat_id Cross-Site Scripting

WordPress 1.2.11.2.2 - link-categories.php?catid Cross-Site Scripting source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of...

WordPress 1.2.11.2.2 - moderation.php?item_approved Cross-Site Scripting

WordPress 1.2.11.2.2 - moderation.php?itemapproved Cross-Site Scripting source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization ...

WordPress Core 1.2.1/1.2.2 - '/wp-admin/templates.php?file' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress Core 1.2.1/1.2.2 - 'link-add.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...

WordPress Core 1.2.1/1.2.2 - 'link-categories.php?cat_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...