6307 matches found
212Cafe Board 0.07 - 'qID' SQL Injection
=================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Invision Power Board 2.* commands execution exploit by RST/GHC
No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getopts"l:h:p:d:f:v:"; $host = $opth; $dir...
Invision Power Board 'name'参数SQL注入漏洞
BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...
Gentoo Security Advisory GLSA 200711-20 (pioneers)
The remote host is missing updates announced in advisory GLSA 200711-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-4171
SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...
Sql injection
SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...
CVE-2008-4171
SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...
CVE-2008-4171
CVE-2008-4171 affects Invision Power Board (IPB) 2.2.x and 2.3.x, with a SQL injection in xmlout.php where the name parameter can be manipulated to execute arbitrary SQL commands. The NVD entry cites a remote attacker, with a base score of 7.5 (high) and impact on confidentiality, integrity, and ...
CVE-2008-4171: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...
Invision Power Board < 2.3.6 index.php name Parameter SQL Injection
Binary data 4686.prm...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Invision Power Board = 2.3.5 Remote SQL Injection Exploit ========================================================== ?php errorreportingEALL;...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" //...
Directory traversal
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...
CVE-2008-4076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...
CVE-2008-4075: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...
D-iscussion Board 3.01 (topic) Local File Inclusion Vulnerability
No description provided by source. + D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion PoC :...
D-iscussion Board 3.01 - topic Local File Inclusion
D-iscussion Board 3.01 - topic Local File Inclusion + D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion...
D-iscussion Board 3.01 (topic) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= D-iscussion Board 3.01 topic Local File Inclusion Vulnerability ================================================================= + D-iscussion Board 3.01 Local File Inclusi...
D-iscussion Board 3.01 - 'topic' Local File Inclusion
D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion PoC :...
JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution
Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product. This vulnerability is...