Lucene search
+L

178 matches found

seebug.org
seebug.org
•added 2006/12/06 12:00 a.m.•25 views

XMB <= 1.9.6 Final basename() Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; /...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2006/08/27 12:00 a.m.•28 views

xmb_196_cnd_xpl.txt

!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...

7.4AI score
SaveExploits0
NVD
NVD
•added 2006/08/17 1:04 a.m.•19 views

CVE-2006-4191

Directory traversal vulnerability in memcp.php in XMB Extreme Message Board 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server...

5.1CVSS7.3AI score0.09901EPSS
SaveExploits2References9
CVE
CVE
•added 2006/08/17 1:00 a.m.•50 views

CVE-2006-4191

The CVE-2006-4191 issue affects XMB (Extreme Message Board) up to version 1.9.6. Affected component: memcp.php. Root cause: directory traversal via the langfilenew parameter allows an attacker to cause inclusion of local files, demonstrated by injecting PHP sequences into an Apache log file that ...

5.1CVSS7.6AI score0.09901EPSS
SaveExploits2References9Affected Software1
Cvelist
Cvelist
•added 2006/08/17 1:00 a.m.•31 views

CVE-2006-4191

Directory traversal vulnerability in memcp.php in XMB Extreme Message Board 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server...

7.3AI score0.09901EPSS
SaveExploits2References9
Exploit DB
Exploit DB
•added 2006/08/13 12:00 a.m.•49 views

XMB 1.9.6 Final - 'basename()' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...

5.1CVSS5.8AI score0.09901EPSS
SaveExploits2
exploitpack
exploitpack
•added 2006/08/13 12:00 a.m.•7 views

XMB 1.9.6 Final - basename() Remote Command Execution

XMB 1.9.6 Final - basename Remote Command Execution !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by...

SaveExploits0
zdt
zdt
•added 2006/08/13 12:00 a.m.•96 views

XMB <= 1.9.6 Final basename() Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================== XMB = 1.9.6 Final basename Remote Command Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9...

7.1AI score
SaveExploits0
NVD
NVD
•added 2006/08/05 12:04 a.m.•15 views

CVE-2006-3994

SQL injection vulnerability in the u2usendrecp function in u2u.inc.php in XMB aka extreme message board 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $POST and bypasses the protection scheme...

7.5CVSS8.4AI score0.03807EPSS
SaveExploits2References6
CVE
CVE
•added 2006/08/05 12:00 a.m.•56 views

CVE-2006-3994

XMB has a SQL injection vulnerability CVE-2006-3994 in the u2u_send_recp function of u2u.inc.php (v1.9.6 Alpha and earlier). The u2uid parameter to u2u.php, which is read directly from $_POST, can be used to execute arbitrary SQL commands, bypassing the protection scheme. Affected software: XMB (...

7.5CVSS8.8AI score0.03807EPSS
SaveExploits2References6Affected Software1
exploitpack
exploitpack
•added 2006/08/01 12:00 a.m.•25 views

XMB 1.9.6 - mqoff u2uid SQL Injection

XMB 1.9.6 - mqoff u2uid SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n";...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/08/01 12:00 a.m.•41 views

XMB 1.9.6 - 'mq=off' 'u2uid' SQL Injection

!/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n"; echo "Options:\n"; echo " -Tprefix...

7.5CVSS5.8AI score0.03807EPSS
SaveExploits2
zdt
zdt
•added 2006/08/01 12:00 a.m.•183 views

XMB <= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)

Exploit for unknown platform in category web applications ========================================================== XMB = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/08/01 12:00 a.m.•1729 views

XMB &lt;= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 'u2uid' SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works with magicquotes=off...

7.1AI score
SaveExploits0
NVD
NVD
•added 2006/04/12 10:02 p.m.•18 views

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

2.6CVSS5.7AI score0.01831EPSS
SaveExploits0References4
Prion
Prion
•added 2006/04/12 10:02 p.m.•19 views

Cross site scripting

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

2.6CVSS6.2AI score0.01831EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2006/04/12 10:00 p.m.•55 views

CVE-2006-1748

XSS vulnerability CVE-2006-1748 affects XMB Forum 1.9.5 . A Flash (.SWF) video containing a getURL call can render without ActionScript being disabled, enabling remote attackers to inject arbitrary web script/HTML. Documents confirm the root cause is improper handling of Flash content in the vide...

2.6CVSS5.7AI score0.01831EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2006/04/12 10:00 p.m.•27 views

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

5.7AI score0.01831EPSS
SaveExploits0References4
securityvulns
securityvulns
•added 2006/04/10 12:00 a.m.•32 views

XMB Forum 1.9.5-Final XSS

XMB Forum 1.9.5 I have not tested this on earlier versions allows users to embed flash .swf videos in their posts. Normally, you could set an option on the object tag to say that ActionScript cannot run, but in this case we don't. The way we execute our code is by making a flash movie containing...

1.1AI score
SaveExploits0
Prion
Prion
•added 2006/02/19 12:02 a.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...

4.3CVSS6.1AI score0.02245EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder