CVE-2004-2695

SQL injection vulnerability in the Authorize.net callback code subscriptions/authorize.php in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the xinvoicenum parameter. NOTE: this issue might be related to CVE-2006-4267...

CVE-2004-2695

The CVE-2004-2695 entry describes an SQL injection in Jelsoft vBulletin 3.0–3.0.3, exploitable via the x_invoice_num parameter in subscriptions/authorize.php. This allows remote attackers to execute arbitrary SQL statements. The CVE entry notes a possible relation to CVE-2006-4267, which is indep...

CVE-2007-4453

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...

CVE-2007-4453

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the 1 s parameter to index.php, and the 2 q parameter to a faq.php, b member.php, c memberlist.php, d calendar.php, e search.php, f forumdisplay.php, g...

CVE-2007-4453

CVE-2007-4453 affects vBulletin 3.6.8 and involves multiple reflected XSS vulnerabilities in PHP pages. The issue allows an attacker to inject arbitrary HTML/JS via the s parameter to index.php and the q parameter to files including faq.php, member.php, memberlist.php, calendar.php, search.php, f...

PT-2007-5634 · Vbulletin Solutions · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.6.8 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web code or HTML via specific parameters to various PHP files, includi...

vbul368-xss.txt

Discovred By : Hasadya Raed ---------------- Contact : [email protected] ---------------- Script: vBulletin V3.6.8ulletin V3.6.8 ---------------- Dork: vBulletin V3.6.8ulletin V3.6.8 ---------------- Exploit : http://www.Victim.com/vBulletin V3.6.8ulletin...

vBulletin V3.6.8 XSS Password Md5 Hash

Discovred By : Hasadya Raed ---------------- Contact : [email protected] ---------------- Script: vBulletin V3.6.8ulletin V3.6.8 ---------------- Dork: vBulletin V3.6.8ulletin V3.6.8 ---------------- Exploit : http://www.Victim.com/vBulletin V3.6.8ulletin...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

CVE-2007-4120

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

CVE-2007-4120

CVE-2007-4120 affects Jelsoft vBulletin 3.6.5: multiple PHP remote file inclusion vulnerabilities in includes/functions.php (classfile), includes/functions_cron.php (nextitem), and includes/functions_forumdisplay.php (specialtemplates). The underlying cause is insecure URL handling that could all...

CVE-2007-4120

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

PT-2007-5322 · Vbulletin Solutions · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.6.5 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the classfile parameter to "includes/functions.php", the nextitem parameter to "includes/function...

RFI ====> vBulletin v3.6.5

By Hasadya Raed Contact : [email protected] - Israel Greetz : -Fairoz- ----------------------------------- vBulletin v3.6.5 Dork : "Powered by vBulletin v3.6.5. Copyright ©2000 - 2007 " ----------------------------------- Exploits :...

CVE-2007-3687

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action...

rpginferno-sql.txt

--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

vBulletin Mod RPG Inferno 2.4 (inferno.php) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xpro...

vBulletin Mod RPG Inferno 2.4 (inferno.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= vBulletin Mod RPG Inferno 2.4 inferno.php SQL Injection Vulnerability =======================================================================...

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection --==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==--...

vBulletin Mod RPG Inferno 2.4 - 'inferno.php' SQL Injection

--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...