CVE-2006-7047

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...

CVE-2006-7047

The CVE-2006-7047 entry concerns include.php in Shoutpro 1.0, where a crafted path parameter could bypass IP ban restrictions by referencing an alternate bannedips.php file. The CVE description notes that this was originally reported as remote file inclusion, but the analysis indicates it cannot ...

CVE-2006-5906

The CVE-2006-5906 issue affects Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1, PLS-Bannieres 1.21) and concerns a remote file inclusion in modules/bannieres/bannieres.php. The vulnerability arises from the chemin parameter, which could be used to supply a URL that leads to arbitrary PHP cod...

Start the back door of one idea-the vulnerability of early warning-the black bar safety net

A Group Policy startup script; Use process:start the Group Policyrun-gpedit. msc-Computer Configuration-Windows Settings-scriptsstartup/shutdown Start with the shutdown related settings; Select Start-properties-add will pop up select the script name Selection procedure C:\windows\system32\net.exe...

CVE-2006-3796

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user...

PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit

No description provided by source. / ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a functi...

PHP-Fusion <= 6.0 106 BBCode IMG Tag Script Injection Exploit

Exploit for unknown platform in category web applications ============================================================= PHP-Fusion deluser ./fusionimg banuser ./fusionimg delshout ./fusionimg deladmin is the PHP-Fusion version. enter 6.x or 5.x depending on the version number. is the start point ...

kali.txt

There are some bugs in the kali's tagboard, you can access to the admin system without password!, you can put iframes, scripts... But the most vulnerabilitie is in the ban ip's, you can put this script: " " and execute commands in the server with this url: Example:...