CVE-2006-5597: Undefined Security Weakness

join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified 1 frmMailBox and 2 frmUserPass parameters...

CVE-2006-5597

CVE-2006-5597 affects MiniHTTP Web Forum & File Server PowerPack 4.0. The join.asp endpoint is vulnerable to remote manipulation of user accounts via modified parameters (1) frmMailBox and (2) frmUserPass), allowing an attacker to add or modify arbitrary accounts. The description and references i...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...

SoftBB多个远程代码执行及信息泄露漏洞

SoftBB是一款基于WEB的论坛程序。 SoftBB v0.1中存在多个输入验证错误，如下： 1 在SQL查询时没有正确的验证对/addmembre.php文件中groupe参数及/moveto.php文件中select参数的输入，允许攻击者执行SQL注入攻击。 2 在PHP脚本中存储之前没有正确过滤对admin/saveopt.php中多个参数的输入，允许攻击者执行任意PHP代码。成功攻击可能要求管理员权限。 3 对index.php中page参数的输入没有正确的处理空的或无效的参数，允许攻击者判断安装路径。 SoftBB = 0.1...

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

Exploit for unknown platform in category remote exploits =================================================================== MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit ===================================================================...

MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User

/================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with their join.asp page a malicious...

PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections

PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fai...

PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting

PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application...

PHP-post Web Forum 0.x.1.0 - 'pm.php?replyuser' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

PHP-post Web Forum 0.x.1.0 - 'profile.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

abrior.txt

Azhteam Digital Security Team Abrior's Encore WebForum display.cgi Find by : soltandefacer www.azhteam.com Greetings; s.defacer - azhteam - lvl3hr - edi.programe Bugs File : /forumcgi/display.cgi? Display : http://www.target.com/encore/forumcgi/display.cgi? 1. search in Google --...

YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability

Title : YapBB = 1.2 Beta2 'find.php' SQL Injection Vulnerability ------------------------------------------ Author : x90cKyong Joo, Jung Published : 2006.5.16 E-mail : geinblues at gmail.com Site : http://www.chollian.net/jyj9782 ------------------------------------------ 0x01 Summary YapBB is a...

[eVuln] VEGO Web Forum SQL Injection Vulnerability

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

EV0001.txt

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

CVE-2006-0065

CVE-2006-0065 describes an SQL injection vulnerability in VEGO Web Forum versions up to and including 1.26, affecting (1) functions.php, (2) functions_update.php, and (3) functions_display.php. The flaw allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index....

[SA18273] VEGO Web Forum "theme_id" SQL Injection Vulnerability

TITLE: VEGO Web Forum "themeid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18273 VERIFY ADVISORY: http://secunia.com/advisories/18273/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VEGO Web Forum 1.x http://secunia.com/product/6722/ DESCRIPTION:...

CVE-2006-0065: Undefined Security Weakness

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...