MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

Sql injection

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

CVE-2008-1640

CVE-2008-1640 affects the Woltlab Burning Board addon “JGS-XA JGS-Treffen” (version 2.0.2 and earlier). The vulnerability is in the file jgs_treffen.php and is triggered via the view_id parameter in an ansicht action, enabling remote attackers to execute arbitrary SQL commands (SQL injection). Th...

Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

No description provided by source. Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL...

woltlabbbjgs-sql.txt

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability =================================================================== Woltlab Burning Board Addon...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection:...

Invision Power Board <=2.3.x iFrame Vuln

Tested On: http://www.abarjigs.com/forum/ Effected on:Invision Power Board =2.3.x Type:Signature With iFrame Discovered By:CYBER.DARK.HIMU SHAHEEMIRZA Google: "style designed by Soi" or "Powered by IP.Board 2.3.1" Mail: [email protected],[email protected] HI TO ALL. HOW TO USE THIS...

ipb23x-xss.txt

Tested On: http://www.abarjigs.com/forum/ Effected on:Invision Power Board 1.REG WITH VICTIM FORUM 2.GO TO USER CONTROL PANEL 3.EDIT YOUR SIGNATURE ByTHIS CODE Code: Select all HACKED BY YOUR-NAME 4.AFTER THAT U WILL SEE ALL THE PAGE IS COVERED BY YOUR PAGE 5.GO ANY TOPIC AND POST ANYTHING. 6.AFT...

Invision Power Board 2.x - Signature iFrame Security

Invision Power Board 2.x - Signature iFrame Security source: https://www.securityfocus.com/bid/28466/info Invision Power Board IP.Board is prone to a security vulnerability that can aid attackers in social-engineering attacks. Attacker-supplied script code could exploit vulnerabilities in the...

Invision Power Board 2.x - 'Signature' iFrame Security

source: https://www.securityfocus.com/bid/28466/info Invision Power Board IP.Board is prone to a security vulnerability that can aid attackers in social-engineering attacks. Attacker-supplied script code could exploit vulnerabilities in the user's browser or give the user a false sense of securit...

CVE-2008-1481

Cross-site scripting XSS vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1481

The provided sources confirm a Cross-site Scripting (XSS) vulnerability in webSPELL 4.1.2 (component: index.php) exposed via the board parameter. The root cause discussed is lack of input sanitization/validation for that parameter, enabling injection of arbitrary script or HTML. Public references...

CVE-2008-1481: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913...

CVE-2008-1359

Cross-site scripting XSS vulnerability in Invision Power Board IPB or IP.Board 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913...

CVE-2008-1359

Technical details about CVE-2008-1359 are not provided in the connected documents. The material covers related CVEs (e.g., CVE-2008-0913) and generic IPB XSS context. Monitor for updates.