vBulletin 3.8.6 faq.php Information Disclosure

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Original Advisory: http://forum.intern0t.net/exploits-vulnerabilities-pocs/2857-vbulletin-3-8-6-critical-information-disclosure.html...

vBulletin - 'misc.php' Template Name Arbitrary Code Execution (Metasploit)

$Id: phpvbulletintemplate.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

vBulletin 3.8.6 faq.php Information Disclosure Vulnerability

Exploit for php platform in category web applications =============================================================== vBulletinR 3.8.6 faq.php Information Disclosure Vulnerability ===============================================================...

vBulletin 3.8.6 - faq.php Information Disclosure

vBulletin 3.8.6 - faq.php Information Disclosure 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Original Advisory:...

vBulletin 3.8.6 - 'faq.php' Information Disclosure

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 0 0 010101010101010101010101010101010101010101010101010101010 Original Advisory: http://forum.intern0t.net/exploits-vulnerabilities-pocs/2857-vbulletin-3-8-6-critical-information-disclosure.html...

vBulletin - Critical Information Disclosure

Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...

vBulletin 'faq.php' Information Disclosure Vulnerability

vBulletin is prone to an information-disclosure vulnerability. Successful exploits can allow attackers to obtain potentially sensitive information which may aid in other attacks. vBulletin 3.8.6 is affected; prior versions may also be vulnerable. OpenVAS Vulnerability Test $Id:...

vBulletin <= 3.8.6 'faq.php' Information Disclosure Vulnerability - Active Check

vBulletin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

vBulletin 3.8.6 Credential Disclosure

Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...

GetEngine.pl - скрипт для определения имени\версии движка

Написал на PERL'е работает по локальной базе base.getEngine в базе более 70 движков запуск: ./ge.pl site.com запуск с подробной инфой: ./ge.pl site.com -debug Код: ./ge.pl rdot.org/forum/ GetEngine v0.1 eLwauxc2009 Found Engine: vBulletin version 3.8.5 clientscript/vbulletinglobal.js Код: ./ge.pl...

Joomla JVB Bridge Remote File Inclusion

============================================= Joomla comjvbbridge RFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

Joomla Component com_jvb_bridge RFI Vulnerability

Exploit for php platform in category web applications ================================================= Joomla Component comjvbbridge RFI Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'...

vBulletin自定义BBCode标签脚本注入漏洞

vBulletin是一款开放源代码的PHP论坛程序。 vBulletin在创建使用自定义标签的内容时没有正确地解析BBCode，这允许攻击者注入任意HTML和脚本代码，当查看恶意数据时就会在用户浏览器会话中执行所注入的代码。 VBulletin 4.0.3 VBulletin 3.8.4 PL2 厂商补丁： VBulletin --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vbulletin.com/ BadTagx:x' onerror=alert0 foo='/BadTag...

vBulletin BB Code Script Insertion Vulnerability

No description provided by source. vBulletin 3.x / 4.x MaXe has reported a vulnerability in vBulletin, which can be exploited by malicious users to conduct script insertion attacks. The vulnerability exists in the parsing of BB Code when creating content that uses custom tags. This can be exploit...

vBulletin - Insecure Custom BBCode Tags

vBulletin - Insecure Custom BBCode Tags Versions Affected: 3.8.4 PL2 Most likely all versions Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes...

Vbulletin - Two-Step External Link XSS

Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.php line 35 Code: $url =...

Vbulletin - Two-Step External Link XSS

No description provided by source. Vendor: vBulletin Affected versions: 3.7.x - 3.8.x Mod: Two-Step External Link URL: http://www.vbulletin.org/forum/showthread.php?t=217708 Vulnerability type: XSS Risk rating: Medium Exploit http://FORUM/externalredirect.php?url=XSS Bug File: externalredirect.ph...

vBulletin Two-Step External Link Module - externalredirect.php Cross-Site Scripting

vBulletin Two-Step External Link Module - externalredirect.php Cross-Site Scripting source: https://www.securityfocus.com/bid/39597/info Two-Step External Link module for vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied...

vBulletin Two-Step External Link Module - 'externalredirect.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39597/info Two-Step External Link module for vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

vBulletin 0-day Denial Of Service Exploit (2)

Exploit for php platform in category dos / poc ============================================= vBulletin 0-day Denial Of Service Exploit 2 ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...