145 matches found
PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability
No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability &n...
PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ PORAR WEBBOARD question.asp Remote SQL Injection Vulnerability ================================================================ CoRPITX Turkey www.Hayalet-hack.com...
PORAR WebBoard - question.asp SQL Injection
PORAR WebBoard - question.asp SQL Injection CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk...
porarwebboard-sql.txt
CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...
PORAR WebBoard - 'question.asp' SQL Injection
CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...
212cafe Webboard Read.PHP SQL注入漏洞
212cafe Webboard是一款基于PHP的WEB应用程序。 212cafe Webboard不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'Read.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 212Cafe Webboard 6.30 Beta 目前没有解决方案提供： http://www.212cafe.com/ http://www.example.com/Board/read.php?id=SQL...
212Cafe WebBoard 6.30 - Read.php SQL Injection
212Cafe WebBoard 6.30 - Read.php SQL Injection source: https://www.securityfocus.com/bid/25526/info 212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...
212Cafe WebBoard 6.30 - 'Read.php' SQL Injection
source: https://www.securityfocus.com/bid/25526/info 212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
Unfixed XSS vulnerability at www.cdd.go.th
Security researcher Narcoticxs, has submitted on 23/07/2007 a cross-site-scripting XSS vulnerability affecting www.cdd.go.th, which at the time of submission ranked 56348 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/08/2007. It is current...
SIX-webboard does not adequately validate user input thereby permitting directory traversal
Overview SIX-webboard does not adequately validate user input, allowing directory traversal. Description SIX-webboard 2.01 does not adequately validate the "content" CGI variable, allowing directory traversal out of SIX-webboard's content root directory. Attackers may exploit this vulnerability t...
CVE-2001-1115
generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...
CVE-2001-1115
The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...
CVE-2001-1115: Undefined Security Weakness
generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...
CVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...
CVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...
CVE-2001-0743
Vulnerability CVE-2001-0743 affects O'Reilly WebBoard Pager 4.10. The issue: improper input validation allows remote attackers to trigger arbitrary JavaScript execution on other WebBoard users’ systems by sending a message containing an escaped single quote followed by JavaScript commands, which ...
CVE-2001-0743: Undefined Security Weakness
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...
Обратный путь в директориях SIX-webboard (directory traversal)
Обратный путь в директориях в generate.cgi...
SIX-webboard 2.01 "show files" vulnerability
a little bit late, but "it's better late than never"! -------------- PoizonB0x Advisory1 pb0x-07-07-2001 - --------------- -NAME: SIX-webboard 2.01 "show files" vulnerability. -DESCRIPTION: Little, but very popular webboard coded by Pipo [email protected]. Find more information about the...