Path traversal

WoltLab Community Framework WCF 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid 1 page and 2 form parameters, which leaks the path from an exception handler when a valid class cannot be found...

CVE-2008-1717

CVE-2008-1717 affects WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5. The vulnerability allows remote attackers to obtain the full file path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found. Thi...

CVE-2008-1716

Vulnerability summary (CVE-2008-1716): The issue is a cross-site scripting (XSS) flaw in WoltLab Community Framework (WCF) 1.0.6 within WoltLab Burning Board 3.0.5. It allows remote attackers to inject arbitrary web script or HTML via the (1) page and (2) form parameters, which are echoed back in...

CVE-2008-1717: Exposure of Sensitive Information to an Unauthorized Actor

WoltLab Community Framework WCF 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid 1 page and 2 form parameters, which leaks the path from an exception handler when a valid class cannot be found...

CVE-2008-1716: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WoltLab Community Framework WCF 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page and 2 form parameters, which are not properly handled when they are reflected back in an error message...

mybbcp-sql.txt

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

Uncover 88red system-vulnerability warning-the black bar safety net

Author: Xiao Shuaixsser@0. S. T This article has been published in the hacker Handbook No. 4, reproduced please indicate the source, or in a hyperlink way to specify: http://blog.0kee.com/xiaoshuai small handsome's blog A long time didn't go to the asp300 for a walk, not to feel sorry for this...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

Sql injection

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

CVE-2008-1640 affects the Woltlab Burning Board addon “JGS-XA JGS-Treffen” (version 2.0.2 and earlier). The vulnerability is in the file jgs_treffen.php and is triggered via the view_id parameter in an ansicht action, enabling remote attackers to execute arbitrary SQL commands (SQL injection). Th...

Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

No description provided by source. Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL...

woltlabbbjgs-sql.txt

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability =================================================================== Woltlab Burning Board Addon...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection:...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Invision Power Board <=2.3.x iFrame Vuln

Tested On: http://www.abarjigs.com/forum/ Effected on:Invision Power Board =2.3.x Type:Signature With iFrame Discovered By:CYBER.DARK.HIMU SHAHEEMIRZA Google: "style designed by Soi" or "Powered by IP.Board 2.3.1" Mail: [email protected],[email protected] HI TO ALL. HOW TO USE THIS...

ipb23x-xss.txt

Tested On: http://www.abarjigs.com/forum/ Effected on:Invision Power Board 1.REG WITH VICTIM FORUM 2.GO TO USER CONTROL PANEL 3.EDIT YOUR SIGNATURE ByTHIS CODE Code: Select all HACKED BY YOUR-NAME 4.AFTER THAT U WILL SEE ALL THE PAGE IS COVERED BY YOUR PAGE 5.GO ANY TOPIC AND POST ANYTHING. 6.AFT...

Invision Power Board 2.x - Signature iFrame Security

Invision Power Board 2.x - Signature iFrame Security source: https://www.securityfocus.com/bid/28466/info Invision Power Board IP.Board is prone to a security vulnerability that can aid attackers in social-engineering attacks. Attacker-supplied script code could exploit vulnerabilities in the...