Invision Power Board sources/post.php qpid Parameter SQL Injection

The version of Invision Power Board on the remote host suffers from a flaw in 'sources/post.php' that allows injection of SQL commands into the remote SQL database. An attacker may use this flaw to gain control of the remote database and possibly to overwrite files on the remote host. %NASLMINLEV...

Invision Power Board 2.0.0 < 2.0.2 - SQL Injection

!/usr/bin/perl use IO::Socket; Invision Power Board v2.0.0 - 2.0.2 sql injection exploit by RusH security team www.rst.void.ru coded by 1dt.w0lf example: r57ipb.pl 127.0.0.1 /IPB202/ 2 1 3edb1eaeea640d297ee3b1f78b5679b3...

Invision Power Board v2.0.0 - 2.0.2 Sql Injection Exploit

No description provided by source. !/usr/bin/perl use IO::Socket;...

Invision PowerBoard < 2.0.3 SQL Injection

Binary data 2422.prm...

Invision Power Board ibProArcade Module index.php cat Parameter SQL Injection

The installation of Invision Power Board on the remote host includes an optional module, named 'Arcade', that allows unauthorized users to inject SQL commands into the remote SQL database through the 'cat' parameter. An attacker may use this flaw to gain control of the remote database and possibl...

mp-invision.txt

SQL-injection in Invision Power Board 2.x MaxPatrol Security Advisory 11.18.04 November 18, 2004 Release Date: November 18, 2004 Date Reported: November 12, 2004 Severity: High Application: Invision Power Board v2.x Affects versions: IPB 2.0.0, IPB 2.0.1 and IPB 2.0.2. Platform: PHP I. DESCRIPTIO...

IPBProArcade 2.5 - SQL Injection

source: https://www.securityfocus.com/bid/11719/info A remote SQL injection vulnerability reportedly affects ipbProArcade. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in an SQL query. An attacker may leverage this issue to...

[MaxPatrol] SQL-injection in Invision Power Board 2.x

SQL-injection in Invision Power Board 2.x MaxPatrol Security Advisory 11.18.04 November 18, 2004 Release Date: November 18, 2004 Date Reported: November 12, 2004 Severity: High Application: Invision Power Board v2.x Affects versions: IPB 2.0.0, IPB 2.0.1 and IPB 2.0.2. Platform: PHP I. DESCRIPTIO...

Invision Power Board 2.0 - 'index.php' Post Action SQL Injection

source: https://www.securityfocus.com/bid/11703/info A remote SQL injection vulnerability affects Inivision Power Board. This issue is due to a failure of the application to properly validate user-supplied input prior to using it in an SQL query. An attacker may leverage this issue to manipulate...

waraxe-2004-SA037.txt

================================================================================ waraxe-2004-SA037 ================================================================================ Sql injection bug in Phorum 5.0.12 and older versions...

[SA13137] Infuseum ASP Message Board Unspecified Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

technote-commandexec.txt

Technote Command Excution Technote Inc. from Korea offers a Site Package which includes a web board. Previous exploit discovered way back on year 2000 focused on a File Disclosure Vulnerability http://www.securityfocus.com/bid/2156/discussion/ However, command execution is also possible using the...

gosmart.txt

This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...

GoSmart Message Board Multiple Vulnerabilities (SQLi, XSS)

The remote host is running GoSmart message board, a bulletin board manager written in ASP. The remote version of this software contains multiple flaws, due to a failure of the application to properly sanitize user-supplied input. It is also affected by a cross-site scripting vulnerability. As a...

BlackBoard Internet Newsboard System checkdb.inc.php libpath Parameter Remote File Inclusion

The remote host is running the BlackBoard Internet Newsboard System, an open source, PHP-based internet bulletin board software application. The remote version of this software is vulnerable to a remote file include flaw in checkdb.inc.php, due to a lack of sanitization of user-supplied data to t...

[Full-Disclosure] [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board

This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...

[MAXPATROL Security Advisories] Cross site scripting in Invision Power Board

MAXPATROL Security Advisories Cross site scripting in Invision Power Board Date: 5.10.2004 Severity: Low Application: Invision Power Board v2.0.0 Platform: PHP I. DESCRIPTION An input validation vulnerability was found in Invision Power Board. A remote user can conduct Cross site scripting attack...

Invision Power Board Referer field XSS

The version of Invision Power Board installed on the remote host is vulnerable to cross-site scripting attacks that could allow an attacker to steal a user's cookies. %NASLMINLEVEL 70300 This script was rewritten by Tenable Network Security, using a new HTTP API, and modified to be compliant with...

[Full-Disclosure] SQL injection in BroadBoard Instant ASP Message Board

BroadBoard Instant ASP Message Board URL: http://www.broadboard.com/ 1. software does not properly validate user-supplied input in the 'keywords' parameter in search.asp: http://broadboard/forum/search.asp?archives=1&action=1&keywords='SQL code&method=1&method=1&body=1&subject=1&board=1&results=1...

FreezingCold Broadboard - 'profile.asp' SQL Injection

source: https://www.securityfocus.com/bid/11250/info Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query. An attacker may...