vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln

No description provided by source. --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza = 2.x vbplaza.php Remote Blind SQL Injection Vulnerability +==--...

vBulletin vbBux/vbPlaza Blind SQL Injection

--==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin...

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit...

vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection

--==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin...

vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications ===================================================================== vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin . 0day.today...

[InterN0T] AMember 3.1.7 - Multiple Vulnerabilities

AMember - Multiple Vulnerabilities Version Affected: 3.1.7 Apr-10-2009 newest Info: aMember is a flexible membership and subscription management PHP script. It has support for PayPal, BeanStream, 2Checkout, NoChex, VeriSign PayFlow, Authorize.Net, PaySystems, Probilling, Multicards, E-Gold and...

Design/Logic Flaw

The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...

CVE-2008-6754

The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...

CVE-2008-6754

The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...

CVE-2008-6754

The CVE-2008-6754 vulnerability affects the Personal Sticky Threads addon 1.0.3c for vBulletin. Remote authenticated users can disclose information from arbitrary threads (title, author, and pages) by toggling a personal sticky, indicating an information disclosure flaw in the addon’s handling of...

Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. VBulletin: crossite scripting...

Vulnerability in vbAnonymizer for vBulletin

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в плагине vbAnonymizer для vBulletin. Ранее я писал про Redirector и Cross-Site Scripting уязвимости в vbAnonymizer для vBulletin. Если к Redirector уязвимы все версии vbAnonymizer, то к XSS уязвимы версии до 2.8 в...

Re: Vulnerabilities in vBulletin

Здравствуй Владимир! По поводу данных уязвимостей в vBulletin. Как мне сообщил разработчики vBulletin, когда я им сообщил о данных уязвимостях, redirector.php не является частью движка, это какой-то плагин к vB неизвестный для разработчиков движка. Поэтому уязвимости имеют место в данном плагине...

Vulnerabilities in vBulletin

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Redirector и Cross-Site Scripting уязвимостях в vBulletin. Redirector: http://site/redirector.php?url=http://websecurity.com.ua XSS: http://site/redirector.php?url=javascript:alertdocument.cookie К XSS уязвимы vBulletin 3.7.0 Beta 5 и предыдущие...

vBulletin管理控制台多个HTML注入漏洞

BUGTRAQ ID: 34393 vBulletin是一款开放源代码的PHP论坛程序。 vBulletin管理控制台的admincp/usertitle.php、admincp/image.php模块没有正确地验证用户所提交的 Users、Icons、Smilies、avatar等参数，远程攻击者可以提交包含有脚本代码的恶意标题名称导致注入并执行任意HTML代码。 VBulletin 3.8.0 RC2 VBulletin --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vbulletin.com...

[Aria-Security.com] vBulletin multiple XSS

vBulletin 3.8.2 adminCP Cross-Site Scripting R.I.P DrtRp - We miss you --------------------------------------------- Original Post at http://forum.aria-security.com/en/showthread.php?p=1179 Greetz to Aura & all Aria-Security Mods & Members These were all tested on vbulletin 3.8.0 RC2 so other...

vBulletin 3.8.2 Cross Site Scripting

vBulletin 3.8.2 adminCP Cross-Site Scripting R.I.P DrtRp - We miss you --------------------------------------------- Original Post at http://forum.aria-security.com/en/showthread.php?p=1179 Greetz to Aura & all Aria-Security Mods & Members These were all tested on vbulletin 3.8.0 RC2 so other...

vBulletin <= 3.7.3.pl1 'admincalendar.php' SQLi Vulnerability

vBulletin is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

vBulletin <= 3.7.4 Multiple SQLi Vulnerabilities

vBulletin is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

VBulletin 3.7.4 multiple SQL Injection Vulnerability

vBulletin is prone to multiple SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in SQL querys. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...