5556 matches found
Pentacle In-Out Board 6.03 - 'login.asp' Remote Authentication Bypass
Pentacle In-Out Board function ptxpl ifdocument.xpl.victim.value=="" alert"Please enter site!"; return false; ifconfirm"Are you sure?" xpl.action="http://"+document.xpl.victim.value+"/login.asp"; xpl.username.value=document.xpl.username.value; xpl.userpassword.value=document.xpl.userpassword.valu...
PunBB1.2.10.txt
/ --------------------------------------------------------------- Neo Security Team NST® PunBB 1.2.10 Multiple DoS Vulnerabilities --------------------------------------------------------------- Program : PunBB 1.2.10 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.10 & lower ones...
Invision Power Board 2.1.4 Multiple Vulnerabilities
/ -------------------------------------------------------- Neo Security Team NSTВ® - Advisory 16 - 18/02/06 -------------------------------------------------------- Program: Invision Power Board 2.1.4 Homepage: http://www.invisionboard.com Vulnerable Versions: 2.1.4 & Lower versions Risk: Low...
CVE-2006-0809
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0810
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...
CVE-2006-0811
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
Cross site scripting
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
Sql injection
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0809
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0809
The CVE-2006-0809 issue affects Skate Board 0.9. Vulnerable components are includes/root/sendpass.php and includes/root/login.php/logged.php; the adversary can exploit via input fields (POST: usern, passwd) and the cookie sf_cookie, as well as related server-side usage of these values in SQL quer...
CVE-2006-0811
Skate Board 0.9 contains a Cross-site scripting (XSS) vulnerability in reguser.php. The issue arises from unsanitized input in the registration form, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. Connected sources corroborate XSS in reguser.php (e.g....
CVE-2006-0810
Skate Board 0.9 is affected by CVE-2006-0810 via a PHP code injection vulnerability in config.php. Remote authenticated administrators can modify variables in config.php, potentially enabling arbitrary PHP code execution. This is described as a vulnerability in Skate Board 0.9 related to config.p...
CVE-2006-0811
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
CVE-2006-0810
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...
CVE-2006-0750
CVE-2006-0750 describes a SQL injection vulnerability in army.php of the Supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB). The issue arises from the userstat parameter used in an army action to index.php, enabling remote attackers to execute arbitrary SQL commands (root c...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print "Creating shell... Please wait\n"; $...
Gravity Board X 1.1 - 'csscontent' Remote Code Execution
!/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Gravity Board X new or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print "Forum unable to save changes in css template...
Gravity Board X 1.1 - csscontent Remote Code Execution
Gravity Board X 1.1 - csscontent Remote Code Execution !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res =...
ArmySystemv2.1.txt
Invision Power Board Army System Mod = 2.1 SQL Injection Exploit VULNERABLE PRODUCT ----------------------------------- Invision Power Board Army System Mod Version: 2.1 and priors. Url: http://supersmashbrothers.2ya.com Vulnerability: Remote SQL Injection...