Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection

!/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die "-Connect Failed\r\n"; print "+Connecting...\n"; print $socket...

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die...

Invision Power Board Dragoran Portal Mod <= 1.3 SQL Injection Exploit

No description provided by source. !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV 3 print q IPB Portal 1.3 SQL injection Get Hash Exploit Tested on Invision Power Board 1.3....

kapda-22.txt

KAPDA::22 - Azbb v1.1.00 Cross Site Scripting KAPDA New advisory Vulnerable products : Azbb alert'XSS'"" NASL : -------------------- azbb1100XSS.nasl This script was written by Pedram Hayati pi3ch at kapda dot...

CVE-2006-0407

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

Cross site scripting

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

CVE-2006-0407

CVE-2006-0407 affects AZ Bulletin Board (AZbb) 1.1.00 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in post.php, exploitable via the nickname parameter and an iframe tag in the topic parameter, enabling injection of arbitrary HTML/JavaScript by an attacker. The description n...

CVE-2006-0407

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

Update Protection against phpBB and PHPGedView Remote Execution Vulnerabilities

phpBB is a widely used bulletin board software package. PhpGedView is a genealogy program which allows for genealogy viewing and editing on the Web. Several vulnerabilities reported in phpBB and in PhpGedView could allow an attacker to execute arbitrary PHP code...

[SA18565] AZ Bulletin Board Cross-Site Scripting Vulnerabilities

TITLE: AZ Bulletin Board Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18565 VERIFY ADVISORY: http://secunia.com/advisories/18565/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: AZ Bulletin Board AZbb 1.x http://secunia.com/product/4938/ DESCRIPTIO...

Sql injection

SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...

CVE-2006-0160

SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...

CVE-2006-0160

CVE-2006-0160 affects Venom Board 1.22, with a SQL injection in add_post.php3/post.php3. The vulnerability allows a remote attacker to inject arbitrary SQL via the (1) parent, (2) root, and (3) topic_id parameters, enabling potential data compromise. No explicit exploit details are provided in th...

CVE-2006-0160

SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...

EV0021.txt

New eVuln Advisory: Venom Board SQL Injection Vulnerability --------------------Summary---------------- Software: Venom Board Sowtware's Web Site: http://sourceforge.net/projects/venomboard/ Versions: 1.22 Critical Level: Moderate Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit...

[eVuln] Venom Board SQL Injection Vulnerability

New eVuln Advisory: Venom Board SQL Injection Vulnerability --------------------Summary---------------- Software: Venom Board Sowtware's Web Site: http://sourceforge.net/projects/venomboard/ Versions: 1.22 Critical Level: Moderate Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit...

Venom Board - 'Post.php3' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16176/info Venom Board is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

Venom Board - Post.php3 Multiple SQL Injections

Venom Board - Post.php3 Multiple SQL Injections source: https://www.securityfocus.com/bid/16176/info Venom Board is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

phpBB viewtopic.php highlight parameter vulnerability

Added: 12/28/2005 CVE: CVE-2005-2086 BID: 14086 OSVDB: 17613 Background phpBB is an open-source bulletin board package written in PHP. Problem This is a variant of an older vulnerability which allows remote command execution by requesting viewtopic.php with a specially crafted highlight parameter...

phpBB viewtopic.php highlight parameter vulnerability

Added: 12/28/2005 CVE: CVE-2005-2086 BID: 14086 OSVDB: 17613 Background phpBB is an open-source bulletin board package written in PHP. Problem This is a variant of an older vulnerability which allows remote command execution by requesting viewtopic.php with a specially crafted highlight parameter...