Invision Board 1.1.1 - 'ipchat.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/6976/info Invision Board is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote user supplied data used in URI...

Invision Power Board ipchat.php root_path Parameter Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using Invision Power Board. The ipchat.php script fails to sanitize input passed to the 'rootpath' parameter. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the...

php-Board (php)

Informations : °°°°°°°°°°°°°° Website : http://www.hp-planet.de Version : 1 Problem : Informations disclosure PHP Code/Location : °°°°°°°°°°°°°°°°°°° login.php : ----------------------------------------- function passwd2$user $password="nicht registriert"; if fileexists"user/".$user.".txt" $fp =...

PHP-Board 1.0 - User Password Disclosure

PHP-Board 1.0 - User Password Disclosure source: https://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain acce...

PHP-Board 1.0 - User Password Disclosure

source: https://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain access to php-board user and administrative...

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution (2)

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution 2 source: https://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a resul...

Psunami Bulletin Board 0.x - 'Psunami.cgi' Remote Command Execution (1)

source: https://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote attacker to execute arbitrary...

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution (1)

Psunami Bulletin Board 0.x - Psunami.cgi Remote Command Execution 1 source: https://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a resul...

Psunami Bulletin Board 0.x - 'Psunami.cgi' Remote Command Execution (2)

source: https://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote attacker to execute arbitrary...

Community Vizard Board SQL injection

SQL injection into login protmpt...

CVE-2002-1830

Open Bulletin Board OpenBB 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters...

CVE-2002-1829

Cross-site scripting XSS vulnerability in codeparse.php in Open Bulletin Board OpenBB 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via 1 myhome.php, 2 an onerror attribute in an IMG tag a variant of CVE-2002-0330, or 3 a glow tag...

CVE-2002-2021

Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2002-1733

Cross-site scripting XSS vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post...

CVE-2002-1821

Ultimate PHP Board UPB 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to 1 adminmembers.php, 2 adminconfig.php, 3 admincat.php, or 4 adminforum.php...

CVE-2002-2322

Ultimate PHP Board UPB 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords...

CVE-2002-1820

register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...

CVE-2002-2276

Ultimate PHP Board UPB 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message...

CVE-2002-1902

CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service infinite recursion by creating a message board post that is a child of an outdated parent...

PT-2002-2542 · Unknown · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB versions 1.0 and 1.0b Description: The issue allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a", since the administrative account Admin with a capital...