OpenForum 'profile.php' Authentication Bypass Vulnerability

OpenForum is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-7066

OpenForum 0.66 Beta is impacted by CVE-2008-7066. The vulnerability allows remote attackers to bypass authentication and reset passwords of other users by sending a direct request with update=1 and modified user/password parameters. The NVD entry reports a base score of 7.5 (HIGH) with network ac...

Sql injection

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...

CVE-2008-7060

Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...

CVE-2008-7059

CVE-2008-7059 describes an SQL injection vulnerability in the index.php of One-News Beta 2, exploitable via the q parameter. This allows remote attackers to execute arbitrary SQL commands. The issue is classified with a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no ...

CVE-2008-7060

CVE-2008-7060 concerns One-News Beta 2 and involves multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the title or content fields of a news item (add.php) and via itemnum, author, or comment fields of a comment (index.php). Vectors 1 and 2 require user authenticati...

CVE-2008-7059

SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/...

CVE-2008-7029

The CVE-2008-7029 entry concerns an unrestricted file upload in AlilG Application AliBoard Beta, specifically in usercp.php. A remote authenticated user could upload a file with an executable extension as an avatar via uploads/avatars/ and access it directly to execute arbitrary code. The vulnera...

CVE-2008-7029: Improper Input Validation

Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/...

CVE-2008-6996

Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...

Code injection

Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...

CVE-2008-6996

CVE-2008-6996 affects Google Chrome BETA 0.2.149.27. The vulnerability is that Chrome does not prompt the user before saving an executable file, potentially enabling a remote attacker or malware to cause disk-based DoS or exploit other vulnerabilities via a URL referencing an executable (possibly...

CVE-2008-6996

Removed by vendor...

broid 1.0 Beta 3a Buffer Overflow

!/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and Settings\ahmed\Desktop\hack4love.mp3" ESP 0012EF74 EBP 00FFE1...

broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= broid 1.0 Beta 3a .mp3 File Local Buffer Overflow PoC ======================================================= !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack...

broid 1.0 Beta 3a (.mp3 File) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and...

broid 1.0 Beta 3a - .mp3 Local Buffer Overflow (PoC)

broid 1.0 Beta 3a - .mp3 Local Buffer Overflow PoC !/usr/bin/perl Found By :: HACK4LOVE broid 1.0 Beta 3a .mp3 File Local Stack Overflow PoC http://s1.freedownloadsplace.com/download-soft1/broid-1.0-Beta-3a.zip EAX 8C8C8C7D ECX 41414141 EDX C3C3C3C3 EBX 00FE28B8 ASCII "C:\Documents and...

CVE-2008-6996: Undefined Security Weakness

Google Chrome BETA 0.2.149.27 does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service disk consumption or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask...