Invision Power Board <= 2.2.2 / 2.3.5 Multiple Vulnerabilities

Binary data 4640.prm...

Invision Power Board多个远程安全漏洞

BUGTRAQ ID: 30921 CNCAN ID：CNCAN-2008090103 Invision Power Board是一款基于PHP的WEB论坛程序。 Invision Power Board存在多个安全问题，远程攻击者可以利用漏洞访问或修改数据，操作数据库等攻击。 存在的漏洞包括SQL注入，管理会话劫持等攻击。 Invision Power Services Invision Power Board 2.3.5 Invision Power Board Invision Power Board 2.2.2 Invision Power Board...

CVE-2008-3725

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3725

CVE-2008-3725 concerns the YourFreeWorld Ad Board Script, specifically the vulnerable file trr.php. The issue is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by supplying a crafted value for the id parameter. The vulnerability potentially enables pa...

CVE-2008-3725

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3725: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Ab Board (id) Remote SQL Injection Vulnerability

No description provided by source. || | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Ad Board - id SQL Injection

Ad Board - id SQL Injection || | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

adboard-sql.txt

|| | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/adboard.php | | DorK :...

Ad Board (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ Ad Board id Remote SQL Injection Vulnerability ================================================ || | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin...

Ad Board (id) Remote SQL Injection Vulnerability

No description provided by source. || | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Ad Board - 'id' SQL Injection

|| | | Ad Board trr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/adboard.php | | DorK :...

CVE-2008-3556

Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 showmember parameter in a members action and the 2 thread parameter in a board action. NOTE: vector 1 might be the same as CVE-2008-2522...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Gravity Board X GBX 2.0 Beta, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchquery parameter in a getsearch action, and the 2 boardid parameter in a viewboard action...

CVE-2008-2997

Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...

CVE-2008-2996

Multiple SQL injection vulnerabilities in index.php in Gravity Board X GBX 2.0 Beta, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchquery parameter in a getsearch action, and the 2 boardid parameter in a viewboard action...

CVE-2008-2997

CVE-2008-2997 : XSS vulnerability in Gravity Board X (GBX) 2.0 Beta. In GBX’s index.php, the subject parameter in the postnewsubmit (create new thread) action can be exploited to inject arbitrary script/HTML. This remote vector could affect users who submit a thread, with the impact described as ...

CVE-2008-2997

Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...