Beehive Forum 1.5.2 Account Takeover

Exploit Title: Beehive Forum - Account Takeover Date:08/05/2022. Exploit Author: Pablo Santiago Vendor Homepage: https://www.beehiveforum.co.uk/ Software Link: https://sourceforge.net/projects/beehiveforum/ Version: 1.5.2 Tested on: Kali Linux and Ubuntu 20.0.4 CVE N/A PoC:...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Founded in 2010, Nantong Dot Cool Network Technology Co., Ltd. mainly provides industry website construction and solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd.'s Beehive website builder system, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Networks Technology Co. Since its inception, the company has provided many groups of enterprises and listed companies with perfect industry website construction solutions. There is a SQL injection vulnerability in Nantong Dot Cool Network Technology Co., Ltd's Beehive website...

Oracle Beehive prepareAudioToPlay() Function Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Oracle Beehive suffers from a vulnerability tha...

EYEE Beehive App Has Logic Design Flaws

EYEE Bee Tide App is an online shopping app. There is a logical design vulnerability in EYEE Beehive APP. An attacker can register any account and reset any password by grabbing packets and bursting the verification code...

Oracle BeeHive 2 voice-servlet prepareAudioToPlay() 任意文件上传漏洞

No description provided by source...

Oracle BeeHive 2 - 'voice-servlet prepareAudioToPlay()' Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet prepareAudioToPlay Arbitrary File Upload", 'Description' = %q This module exploits a vulnerability...

Oracle BeeHive 2 - 'voice-servlet processEvaluation()' Write File (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...

Oracle BeeHive 2 Arbitrary File Upload

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet prepareAudioToPlay Arbitrary File Upload", 'Description' = %q This module exploits a vulnerability...

Oracle BeeHive 2 Arbitrary File Upload Exploit

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The prepareAudioToPlay method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM. Authentication is not required to...

Oracle BeeHive 2 Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Oracle BeeHive 2 voice-servlet processEvaluation Vulnerability", 'Description' = %q This module exploits a vulnerability found in...

Oracle BeeHive 2 Code Execution Exploit

This Metasploit module exploits a vulnerability found in Oracle BeeHive. The processEvaluation method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM. This module requires Metasploit:...

Oracle BeeHive 2 voice-servlet prepareAudioToPlay() arbitrary file upload vulnerability

Oracle Beehive is Oracle's software platform for enterprise messaging and writing services. An arbitrary file upload vulnerability exists in Oracle BeeHive 2 voice-servlet prepareAudioToPlay. Allows an attacker to submit a special file to execute arbitrary code...

Oracle Beehive 'playAudioFile.jsp'远程代码执行漏洞

No description provided by source...

Oracle Beehive 'playAudioFile.jsp' Remote Code Execution Vulnerability

Oracle Beehive is a suite of unified communications and collaboration solutions from Oracle that provides a comprehensive set of integrated collaboration services, including conferencing, instant messaging, email, calendaring and team workspaces. A remote code execution vulnerability exists in...

Oracle Beehive prepareAudioToPlay 文件创建漏洞

No description provided by source...

Oracle Beehive prepareAudioToPlay Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Beehive. Authentication is not required to exploit this vulnerability. The specific flaw exists within the voice-servlet's playAudioFile.jsp. The method prepareAudioToPlay contains vulnerabl...

Oracle BeeHive 2 voice-servlet prepareAudioToPlay() Arbitrary File Upload

This module exploits a vulnerability found in Oracle BeeHive. The prepareAudioToPlay method found in voice-servlet can be abused to write a malicious file onto the target machine, and gain remote arbitrary code execution under the context of SYSTEM. Authentication is not required to exploit this...

Beehive Forum Cross-Site Scripting Vulnerability

Beehive Forum is a set of Web forum software based on PHP and MySQL. The software provides text filtering, user rights management and e-mail notification. A cross-site scripting vulnerability exists in the editprefs.php script in Beehive Forum version 1.4.4, which stems from the program's failure...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in editprefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 homepageurl, 2 picurl, or 3 avatarurl parameter, which are not properly handled in an error message...