vBulletin 3.0.0 - Cross-Site Scripting

Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 =============================================== WWW.sec-war.com =============================================== 3.0.0 - Introduction XSS scripts in the script search.php. In fact, a hole through a browser...

vBulletin 3.0.0 XSS Vulnerability

Exploit for unknown platform in category web applications ================================= vBulletin 3.0.0 XSS Vulnerability ================================= Title: vBulletin 3.0.0 XSS Author: Discovered by ROOTEGY Version: vBulletin Version 3.0.0 3.0.0 - Introduction XSS scripts in the script...

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38179/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities

vBulletin 3.5.4 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/38179/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

vBulletin v 2.3 .* SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== vBulletin v 2.3 . SQL Injection Vulnerability ============================================== Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Versio...

vBulletin v3.5.2 XSS Vulnerabilities

Exploit for unknown platform in category web applications ==================================== vBulletin v3.5.2 XSS Vulnerabilities ==================================== Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 3.5.2...

vBulletin 2.3.x - SQL Injection

Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Version: vBulletin Version 2.3 =========================================================== www.sec-war.com =========================================================== Vulnerability versions 2.3 . - SQL...

vBulletin Adsense SQL Injection

------------------------------ »JIKO »No-exploit.Com »Composant Of Vbulletin -------------- »EXPLOIT viewpage.php?do=show&id=-1 union select 0,1,2-- viewpage.php?do=show&id=-1 union select 0,user,2-- ------------------- you can select the password and username from users table of Forum vbulletin...

vBulletin Adsense Component - viewpage.php SQL Injection

vBulletin Adsense Component - viewpage.php SQL Injection source: https://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

vBulletin Adsense Component - 'viewpage.php' SQL Injection

source: https://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

vBulletin version 4.0.1 remote SQL injection exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print q vBulletin Version 4.0.1 Remote SQL Injection Exploit By indoushka www.iq-ty.com/vb Souk Naamane 00213771818860 Algeria Hackerz [email protected] Dork: Powered by vBulletin Version 4.0.1 ; if !$ARGV2 print q Usage: perl...

vBulletin File Disclosure Exploit

! /usr/bin/env python3.1 validator.php | \ | | | | | | | | | | | | | \ \ / / | | | | | |/ \ | | ' \ \ V /| | | || | | | / || | | | | / |/ ,||||||| || @expl0it... vBulletin Files / Directories Full Disclosure Vuln discovered by TinKode / xpl0it written by cmiN Greetz: insecurity.ro, darkc0de.com...

vBulletin nulled (validator.php) files/directories disclosure

Description: With this file you can see all files.sql - .tar.gz - .zip - .rar - .php - .anything / directories from the folder with vBulletin installed... Exploit: http://www.website.com/vBforum/validator.php Author: PaxNwo www.rstcenter.com...

vBulletin 4.0.1 SQL Injection

!/usr/bin/perl use IO::Socket; print q vBulletin™ Version 4.0.1 Remote SQL Injection Exploit By indoushka www.iq-ty.com/vb Souk Naamane 00213771818860 Algeria Hackerz [email protected] Dork: Powered by vBulletin™ Version 4.0.1 ; if !$ARGV2 print q Usage: perl VB4.0.1.pl host /directory/...

vBulletin 4.0.1 - 'misc.php' SQL Injection

source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

vBulletin 4.0.1 - misc.php SQL Injection

vBulletin 4.0.1 - misc.php SQL Injection source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

vBulletin adminCP Cross-Site Scripting

No description provided by source. .::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE...

vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...

vBulletin - Denial of Service

vBulletin - Denial of Service !/c:/perl/bin VBulletin Denail of Service Exploit by 4.!.5 created : !N 7h3 DARKNESS CODED BY: R3d-D3V!L important = Image Verification in search.php is NOT Enabled. It tested on V3.6.3 Perl Script use Socket; if @ARGV \n"; print "\tex: $0 127.0.0.1 /forum/\n"; print...

vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= vBulletin adssaed 1.5 bnnr.php SQL Injection Vulnerability ============================================================= script name : adssaed d0rk : inurl:"vb/bnnr.php" Example...