1688 matches found
[Full-disclosure] BBCode [IMG] [/IMG ] Tag Vulnerability
Hi, Saw this one on www.waraxe.us Discovered by Easyex and i was thinking if there are some more possibilities using the method described. The POC below is for phpBB. - ========== make yourself a folder on your host rename the folder to signature.jpg this will trick bbcode that its an image file...
CVE-2004-2288
The CVE-2004-2288 entry refers to a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin, specifically in index.php via the loc parameter, allowing remote attackers to spoof parts of a website. Documents collectively confirm the affected product and vulnerable parameter; however, they do...
CVE-2004-2288
Cross-site scripting XSS vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter...
vBulletin <= 3.0.6 (Template) Command Execution Exploit (metasploit)
No description provided by source. Title: vBulletin = 3.0.6 Add Template Name in HTML Comments = Yes command execution eXploit Name: phpvb306.pm License: Artistic/BSD/GPL Info: trying to get the command execution exploits out of the way on milw0rm.com. M's are always good. - This is an exploit...
vBulletin <= 3.0.6 (Template) Command Execution Exploit (metasploit)
Exploit for unknown platform in category web applications ==================================================================== vBulletin 'vBulletin '$Revision: 1.0 $', 'Authors' = 'str0ke' , 'Arch' = , 'OS' = , 'Priv' = 0, 'UserOpts' = 'RHOST' = 1, 'ADDR', 'The target address', 'RPORT' = 1, 'PORT...
vBulletin 3.0.6 - template Command Execution (Metasploit)
vBulletin 3.0.6 - template Command Execution Metasploit Title: vBulletin 'vBulletin '$Revision: 1.0 $', 'Authors' = 'str0ke' , 'Arch' = , 'OS' = , 'Priv' = 0, 'UserOpts' = 'RHOST' = 1, 'ADDR', 'The target address', 'RPORT' = 1, 'PORT', 'The target port', 80, 'VHOST' = 0, 'DATA', 'The virtual host...
vBulletin 3.0.6 - 'template' Command Execution (Metasploit)
Title: vBulletin 'vBulletin '$Revision: 1.0 $', 'Authors' = 'str0ke' , 'Arch' = , 'OS' = , 'Priv' = 0, 'UserOpts' = 'RHOST' = 1, 'ADDR', 'The target address', 'RPORT' = 1, 'PORT', 'The target port', 80, 'VHOST' = 0, 'DATA', 'The virtual host name of the server', 'RPATH' = 1, 'DATA', 'Path to the...
CVE-2002-1922
Cross-site scripting XSS vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the 1 $scriptpath or 2 $url variables...
CVE-2002-1922
CVE-2002-1922 describes a Cross-site Scripting (XSS) vulnerability in Jelsoft vBulletin, affecting versions 2.0.0 through 2.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables in global.php. The connected documents confirm th...
CVE-2002-1679
CVE-2002-1679 is a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 that allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message. The provided connected documents confirm the affected product and version and describe ...
CVE-2002-1678
The CVE-2002-1678 entry describes a Cross-site scripting (XSS) vulnerability in Jelsoft’s vBulletin 2.0 rc2 through 2.2.4, specifically in memberlist.php, allowing remote attackers to steal authentication credentials by injecting a/script into $letterbits. Affected software is Jelsoft vBulletin 2...
CVE-2002-1678
Cross-site scripting XSS vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits...
CVE-2002-1679
Cross-site scripting XSS vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message...
CVE-2004-2076
Cross-site scripting XSS vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2004-2076
The CVE-2004-2076 entry describes a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.0.0 RC4 identified via search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the query parameter, enabling possible theft of cookies or sessio...
CVE-2004-1824
Cross-site scripting XSS vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php...
CVE-2004-1823
Multiple cross-site scripting XSS vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the 1 page parameter to showthread.php or 2 order parameter to forumdisplay.php...
CVE-2004-1824
CVE-2004-1824 – vBulletin XSS vulnerability : The affected software is Jelsoft/vBulletin. The issue is a cross-site scripting flaw in the handling of URI input (not properly sanitized), exploitable via the what parameter to memberlist.php or similar URI input vectors in older vBulletin releases. ...
CVE-2004-1823
The CVE-2004-1823 issue affects Jelsoft vBulletin 2.0 beta 3 through 3.0, where multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter to showthread.php and (2) the order parameter to forumdisplay.php. The vulnerability is caused by u...