185 matches found
Opencart 1.4.9.1 - Arbitrary File Upload
========================================== Opencart remote file Upload Vulnerability ========================================== Exploit Title: Opencart remote file uploade Author: Net.Edit0r Email: [email protected] [email protected] Google dork: inurl:Powered By OpenCart Software Link:...
Simple Machines Forum Detection
Simple Machines Forum SMF, an open source web forum application written in PHP, is running on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47151; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
动网论坛(DVBBS.NET 1.1)prompt.aspx页面存在跨站漏洞
动网论坛做为动网主要服务产品之一，自2001年投入推广并运营以来，得到了国内外广大互联网用户的广泛好评和支持。做为国内第一的互联网论坛服务品牌，占据了国内论坛服务市场的70％以上的用户，动网论坛服务在一些如电影、下载、网游等热门网站的占有率甚至高达80％以上，是中国论坛服务领域事实上的标准。 因为系统程序对用户提交的变量代码未进行有效的过滤或转换，允许攻击者插入恶意的WEB代码。 DVBBS.NET 1.1 厂商补丁： 动网论坛 -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://n.dvbbs.net/...
PHPWind 6.0 multiple cross-site scripting vulnerability-vulnerability warning-the black bar safety net
PHPWind is a domestic of the more popular PHP-based Web forum application. PHPWind 在 访客 注销 时 没有 正确 的 过滤 提交 给 hack.php and search.php and read.php and post.php and thread.php and profile.php and sort.php and message.php and userpay. php, etc. page of request parameters, a remote attacker can submi...
philboard v1.02 sql injection Vulnerability
Exploit for unknown platform in category web applications =========================================== philboard v1.02 Sql Injection Vulnerability =========================================== + + |email protected SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql...
Philweb 1.02 SQL Injection
|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philweb v1.02 sql injection Vulnerability +===========================================================================|| Script : philweb v1.02 || ! Author : ViRuSHiMa || ! Site : WwW.hell-z0ne.org -...
philboard 1.02 - SQL Injection
philboard 1.02 - SQL Injection + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site :...
philboard 1.02 - SQL Injection
|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site : WwW.hell-z0ne.org -...
Move the net Forum DvBBS boardrule. php module SQL injection vulnerability-vulnerability warning-the black bar safety net
Affected system: Move the net Forum Dvbbs php 2.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 3 6 2 8 2 DVBBS is a Aspsky. Net development and maintenance of open source ASP Web forum program. DvBBS does not properly filter user...
Simple Machines Forum < 1.1.8 Password Reset Function Bypass
Binary data 4813.prm...
Phorum admin.php3无需验证修改管理员口令漏洞
BUGTRAQ: 2271 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个问题，远程攻击者可以访问本地系统文件。 admin.php3脚本用于安全和管理被创建的论坛。它带有口令保护，但存在漏洞可以无需访问权限修改管理员口令。一旦拥有了管理功能的访问权限，就可以进入 Master Setting 功能，在 default .langfile name 输入框输入想要访问的系统本地文件，重新载入admin.php3页面后就可以浏览这个文件的内容了。 3.0.7 and...
Phorum violation.php3转发任意邮件漏洞
BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...
MyBB search.php文件跨站脚本执行漏洞
BUGTRAQ ID: 30401 CVECAN ID: CVE-2008-3334 MyBB是一款流行的Web论坛程序。 MyBB的search.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 MyBB 1.2.x MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.net/download/latest...
CVE-2006-5802
SQL injection vulnerability in messagedetails.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter...
MiniHTTPServer Web Forum绕过认证添加用户漏洞
Web Forum & File Sharing Server允许用户在Internet上创建自己的论坛。 Web Forum & File Server在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权操作论坛。 Web Forum & File Server的join.asp文件没有正确验证frmMailBox参数数据的输入，允许攻击者未经授权便以PowerUser的权限添加新的论坛用户。 Mini HTTP Server Web Forum & File Sharing Server 4.0...
CVE-2006-5597
CVE-2006-5597 affects MiniHTTP Web Forum & File Server PowerPack 4.0. The join.asp endpoint is vulnerable to remote manipulation of user accounts via modified parameters (1) frmMailBox and (2) frmUserPass), allowing an attacker to add or modify arbitrary accounts. The description and references i...
CVE-2006-5597: Undefined Security Weakness
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified 1 frmMailBox and 2 frmUserPass parameters...
CVE-2006-5597
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified 1 frmMailBox and 2 frmUserPass parameters...
MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit
No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...