rgboard <= 3.0.12 (rfi/xss) Multiple Vulnerabilities

No description provided by source. Rgboard 3.0.x Multiple Vulnerabilities RFI/XSS // Author:: e.wiZz! // Site:: www.balcanwarez.com // Contact:: N/A :D =========================================================== // Script :: Rgboard // Vulnerable version :: 3.0.0/3.0.12 // Not vulnerable :: 4.0 /...

Galacticomm Worldgroup 3.20 Remote Web Server Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4186/info Galacticomm Worldgroup is a community building package of both client and server software for Microsoft Windows. Worldgroup is based on BBS software, and includes web and ftp servers. A vulnerability has been...

PBLang Bulletin Board System 4.x SendPM.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit thi...

GNU/Linux mbse-bbs <= 0.70.0 - Local Buffer Overflow Exploit

No description provided by source. / GNU/Linux mbse-bbs 0.70.0 & below stack overflow exploit ======================================================== Multiple overflow conditions occur within mbse-bbs versions 0.70.0 & below. The current version of mbse-bbs does not contain these weaknesses...

TCCMS BBS论坛 存储型xss

简要描述： TCCMS BBS论坛 存储型xss 详细说明： 漏洞url:http://bbs.teamcen.com/index.php?ac=indexinfo&bid=8&m=bbs&id=48reply 黑盒测试的 ，这个cms在本地进行了过滤，所以本地怎么改都触发不了xss 但是只要抓包，在把html语句插入进去就会执行 我插入的xss代码 内容 " 都可以执行，不然你可以访问上面的url看看 漏洞证明：...

SiteServer 3.6.4 /siteserver/bbs/background_post.aspx SQL注入漏洞

SiteServer 3.6.4 /siteserver/bbs/backgroundpost.aspx文件Tile参数没有合适过滤，导致SQL注入漏洞。 SiteServer 3.6.4...

How I Got Here: Joe Grand

Dennis Fisher talks with Joe “Kingpin” Grand about his childhood taking apart early PCs and radios, his introduction to the BBS and early phreaking and hacking scene in Boston, his involvement with the L0pht, @stake and now his current life as an engineer running Grand Idea Studios.​ Download:...

Cmseasy某处存在存储型XSS及代码分析（1）

简要描述： 最新版cmseasy存在存储型xss 版本：CmsEasy5.5UTF-820140415 详细说明： 在bbs下的所有POST提交，都会经过bbspublic.php文件里的removexss函数过滤。如下： 可以看到所有POST数据会到dxss函数里 跟进dxss，可以看到数据又来到了removexss里 继续跟进removexss，从图中的1中可以看到removexss首先过滤了一些特殊符号，接着看图中2处，用循环做了一个html实体解码，接着在图中3处用了htmlentitydecode再次进行了一次解码，然后用if判断判断如果还有html编码就exit。...

强智科技教务管理系统注入漏洞可改成绩

简要描述： 昨天无聊 就去一个朋友的大学的教务处看了看。心想说不定能帮他改改挂科成绩 详细说明： 看了一下是一个叫强智科技教务管理系统 google发现爆出过漏洞 登录框POST注入。。 Mssql数据库 我试了试 不知道是哪里的问题 换了好几个工具 都读不出表名 显示的是sa 但是恢复xpcmdshell 失败 执行命令失败 无奈放到Jsky里去扫 惊喜的发现有网站源码 下载下来 发现教务管理系统有一个很鸡肋的BBS 基本上没人登录 BBS的管理员密码默认就是教务管理员密码 但存在另一个表单里 明文显示 这下爽了 先去论坛注册一个用户 然后直接手工注入爆管理员账号密码 顺利进入后台...

CVE-2014-2339

CVE-2014-2339 concerns GNUboard 5.x (and possibly earlier) with multiple SQL injection vulnerabilities in the file bbs/ajax.autosave.php . The flaws allow remote authenticated users to execute arbitrary SQL commands via the parameters subject or content . Exploitation is documented in multiple so...

TCCMS （最新）8.0 后台GETSHELL （源码详析）

简要描述： TCCMS 8.0 BBS版（目前官网最新）后台一处设计不当可GETSHELL 详细说明： /app/admin/tempalate.class.php line:79 public function Save $msgObj = new Msg; $path = ROOTPATH . "/templates/" . Config::get"tdir"; $fullPath = $path . "/" . $POST"name"; //居然直接从POST里面取得文件名，虽然前台没有改文件名的地方，但是只要提供一个有效的post name 就可以上传任意文件了 $handle ...

cmseasy存储型xss漏洞（代码分析）

简要描述： cmseay存储型xss 下载的版本为CmsEasy5.5UTF-820130910 详细说明： bbs/add-archive.php checklogin; //验证用户登录 ......省略........ ifisset$POST'submit' ifstrtolowertrim$POST'verify' != strtolower$SESSION'verify' //确认验证码 actionpublic::turnPage'index.php','验证码输入错误！'; $archive = dbbbsarchive::getInstance;...

How I Got Here: Marc Maiffret

Dennis Fisher talks with Marc Maiffret about his teenage years as a phone phreaker and BBS denizen, the early years of the vulnerability research scene, the Code Red worm and its aftermath and how the security scene has changed in the past 15 years. Download: 10maiffret.mp3...

Xiuno BBS 2.0 reception authentication and authorization bypass vulnerability-vulnerability warning-the black bar safety net

In the clouds on the submission of the vendor of a vulnerability http://www.wooyun.org/bugs/wooyun-2010-019717 that is gorgeous ignored, after digging into it the vulnerability directly to the public 0×0 vulnerability overview 0×1 code analysis 0×2 PoC 0×0 vulnerability overview xiuno achieved...

Xiuno BBS 2.0 background getshell vulnerabilities-vulnerability warning-the black bar safety net

Author: ztz@Dis9Team 0×0 vulnerability overview 1. The system configuration is not stored in the database, but stored in the conf. php; 2. Use the array method to store; 3. Have escape: ‘ = \’ ; 4. The ‘\’without escaping; 5. Insert the\’will be escaped as\\’php\ \ \represents one, and single...

xiuno bbs Forum background code execution Getshell vulnerabilities attached to the use of the method-vulnerability warning-the black bar safety net

Official description: Xiuno the name comes from the Saint Seiya Aries gold Saint Seiya Shura, his attack speed and combat effectiveness is zodiac the strongest, he is the speed and power of the incarnation; in the Buddhist inside, Shura is a six Channel One, in the humanity and heaven, between,...

How I Got Here: Chris Wysopal

Dennis Fisher talks with Chris Wysopal of Veracode about his journey from a teenage BBS user to member of the L0pht to respected security researcher. Known as Weld Pond since his days at the L0pht, Chris also discussed his time at @stake and how the L0pht’s road trip to DC to testify before...

CVE-2012-4019

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

Cross site scripting

Cross-site scripting XSS vulnerability in tokyobbs.cgi in Come on Girls Interface CGI Tokyo BBS allows remote attackers to inject arbitrary web script or HTML via vectors related to the error page...

CVE-2012-4019

Tokyo BBS (Come on Girls Interface) CGI Tokyo BBS is affected by an XSS in tokyo_bbs.cgi, enabling remote attackers to inject arbitrary script/HTML via the error page vector. Affected product: Tokyo BBS provided by Come on Girls Interface; vulnerability details and patches are documented by JVN e...