5307 matches found
XSS and Path Disclosure in UPB
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: XSS and Path Disclosure in UPB product: Ultimate PHP Board UPB final beta 1.0 vendor: http://www.webrc.ca/php/upb.php risk: middle date: 12/7/2k2 discovered by: euronymous /F0KP /HACKRU Team advisory url: http://f0kp.iplus.ru/bz/009.txt...
Ultimate PHP Board 1.0 final Beta - viewtopic.php Directory Contents Browsing
Ultimate PHP Board 1.0 final Beta - viewtopic.php Directory Contents Browsing source: https://www.securityfocus.com/bid/6334/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. Under some circumstances, it ma...
Ultimate PHP Board 1.0 final Beta - 'viewtopic.php' Directory Contents Browsing
source: https://www.securityfocus.com/bid/6334/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. Under some circumstances, it may be possible to disclose the contents of directories. By passing a malicious...
Ultimate PHP Board Board 1.0 final Beta - 'viewtopic.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/6335/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. By passing a malicious script code to the viewtopic.php script, UPB may return the script code to the browser...
Ultimate PHP Board Board 1.0 final Beta - viewtopic.php Cross-Site Scripting
Ultimate PHP Board Board 1.0 final Beta - viewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/6335/info Ultimate PHP Board UPB is a freely available, open source PHP Bulletin Board. It is available for the Unix and Linux operating systems. By passing a malicious script co...
CVE-2002-1149
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings...
CVE-2002-0903
register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...
CVE-2002-1149
The vulnerability CVE-2002-1149 affects Invision Board where the installation procedure recommends placing the phpinfo.php program in the web root. This exposes sensitive information (absolute pathnames, OS information, PHP configuration) via phpinfo output, representing the underlying exposure a...
CVE-2002-1149
The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings...
Information Disclosure with Invision Board installation (fwd)
Message Index Thread Index Reply prev Msg by Date next Msg by Date To: BugTraq Subject: Information Disclosure with Invision Board installation fwd Date: Sep 24 2002 10:11PM Author: Gossi The Dog [email protected] Message-ID: [email protected] Since the vendor...
woltlab.txt
Subject: sql injection vulnerability in WBB 2.0 RC1 and below Date: Sep 8 2002 1:56PM Author: Cano2 Hi, I discovered a serious vulnerability in Woltlab Burning Board 2.0 RC 1 and below some weeks ago. The latest version WBB 2.0 RC 2 seems not vulnerable, but there are still sites using vulnerable...
sql injection vulnerability in WBB 2.0 RC1 and below
Hi, I discovered a serious vulnerability in Woltlab Burning Board 2.0 RC 1 and below some weeks ago. The latest version WBB 2.0 RC 2 seems not vulnerable, but there are still sites using vulnerable versiones. versions tested vulnerable WBB 2.0 RC 1 WBB 2.0 beta 5 WBB 2.0 beta 4 WBB 2.0 beta 3...
WoltLab Burning Board 2.0 - SQL Injection
source: https://www.securityfocus.com/bid/5675/info WoltLab is prone to SQL injection attacks. This is due to insufficient sanitization of parameters handled by the board.php script, which may be supplied externally via the query string in a web request. The logic of a SQL query made by the scrip...
upb.admin.txt
product: Ultimate PHP Board UPB version: Public Beta 1.0b !!FIXED vendor: http://www.webrc.ca/php/upb.php summary: upb allow to any user have access levels 3 to have admin premissions exploit: yes Fix: yes Exploited by Hipik memmbers of www.hackeri.org Bosnians Security Portal email:[email protected]...
CVE-2002-0903
WoltLab Burning Board (wbboard) 1.1.1 is affected. The register.php flow uses a small set of random values for the code parameter passed to action.php to approve registrations, together with predictable new user IDs, enabling remote attackers to hijack new user accounts through brute-forcing the ...
CVE-2002-0903
register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...
CVE-2002-0459
Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter...
CVE-2002-0117
The CVE-2002-0117 entry concerns YaBB (Yet Another Bulletin Board) 1 Gold SP 1 and earlier, where a cross-site scripting vulnerability allows remote attackers to execute arbitrary script and steal cookies through a message containing encoded Javascript in an IMG tag. Affected component is the YaB...
CVE-2002-0117
Cross-site scripting vulnerability in Yet Another Bulletin Board YaBB 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...