5478 matches found
phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)
Exploit for unknown platform in category web applications ================================================================== phpBB = 2.0.15 Register Multiple Users Denial of Service c code ================================================================== /...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (c code)
No description provided by source. / -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower...
CVE-2005-2030
Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...
CVE-2002-1733
Technical details are not publicly available in the provided documents for CVE-2002-1733. Monitor for updates; no confirmed affected products, versions, or fixes are specified in the supplied sources.
CVE-2002-1679
Cross-site scripting XSS vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message...
CVE-2002-1733
Cross-site scripting XSS vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post...
Forum Russian Board 4.2 Full Command Execution Exploit
No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...
Forum Russian Board 4.2 - Full Command Execution
Forum Russian Board 4.2 - Full Command Execution !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru ,...
Forum Russian Board 4.2 - Full Command Execution
!/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use IO::Socket; use Getopt::Std;...
CVE-2005-2004
Multiple cross-site scripting vulnerabilities in Ultimate PHP Board UPB 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ref parameter to login.php, 2 id or 3 page parameter to viewtopic.php, id parameter to 4 profile.php, 5 newpost.php, 6 email.php, ...
CVE-2005-2004
Vulnerability summary (CVE-2005-2004): Multiple cross-site scripting flaws affect Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier. The issues arise from insufficient sanitization of user input in several scripts, enabling remote attackers to inject arbitrary web script or HTML via any of these pa...
CVE-2005-2005
Ultimate PHP Board UPB 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat...
CVE-2005-2005
CVE-2005-2005 affects Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier. The vulnerability arises because UPB stores the users.dat file under the web document root with insufficient access control, allowing remote attackers to directly request db/users.dat and obtain sensitive user information. Rel...
CVE-2005-2003
Ultimate PHP Board UPB 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid zero id parameter to 1 viewtopic.php, 2 profile.php, or 3 newpost.php, which reveals the path in an error message...
CVE-2005-2004
Multiple cross-site scripting vulnerabilities in Ultimate PHP Board UPB 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ref parameter to login.php, 2 id or 3 page parameter to viewtopic.php, id parameter to 4 profile.php, 5 newpost.php, 6 email.php, ...
M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD
M4DR007-06SA security advisory: Multiple vulnerabilities in UPB 1.9.6 GOLD Published: 06 16 2005 Released: 06 16 2005 Name: Ultimate PHP Board UPB Affected Systems: = 1.9.6 GOLD Issue: Full Path Disclosure, Cross-Site Scripting, Sensitive Information Disclosure Author: Alberto Trivero Vendor:...
CVE-2005-2003
Ultimate PHP Board UPB 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid zero id parameter to 1 viewtopic.php, 2 profile.php, or 3 newpost.php, which reveals the path in an error message...
CVE-2005-2005
Ultimate PHP Board UPB 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat...
CVE-2005-2030
Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...
FusionBB Multiple Vulnerabilities
GulfTech Security Research June 6th, 2005 Vendor : InteractivePHP, Inc URL : http://www.fusionbb.com/ Version : Version .11 Beta And Earlier Risk : Multiple Vulnerabilities Description: FusionBB is a popular online message board written in php and developed by InteractivePHP, INC. There are sever...