Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit ============================================================== $char,BENCHMARK3000000,MD523,1"; // Edit 3000000 i...

woltlab303-sql.txt

WoltLab Burning Board 3.0.3 PL1 SQL Injection Vulnerability by NBBN Vendor: http://woltlab.de ::Proof of Concept http://site.tld/wbb3/index.php?page=PMList&folderID=0&pageNo=1&sortField=isViewed&sortOrder=ASC, SELECT password FROM wcf1user WHERE userID=1 AND...

woltlab3-xsrf.txt

WoltLab Burning Board 3.x.x PM Delete Cross-Site Request Forgery Vulnerability by NBBN. Founded: 25 December 2007 Examples: http://domain.tld/wbb3/index.php?page=PM&action=delete&pmID=pmid http://domain.tld/wbb3/index.php?page=PM&action=delete&pmID=1 Fix: Wait for a fix. Or never surf in other...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in modcp.php in Woltlab Burning Board wBB 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a threaddel action...

CVE-2008-0472

The CVE-2008-0472 entry concerns Woltlab Burning Board (wBB) 2.3.6 PL2. The vulnerable component is modcp.php, where a cross-site request forgery (CSRF) can cause thread deletion by a moderator or administrator via a thread_del action. The exploit does not require authentication, aligning with th...

CVE-2008-0472

Cross-site request forgery CSRF vulnerability in modcp.php in Woltlab Burning Board wBB 2.3.6 PL2 allows remote attackers to delete threads as moderators or administrators via a threaddel action...

WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability

WoltLab Burning Board 3.x.x PM Delete Cross-Site Request Forgery Vulnerability by NBBN. Founded: 25 December 2007 Examples: http://domain.tld/wbb3/index.php?page=PMaction=deletepmID=pmid http://domain.tld/wbb3/index.php?page=PMaction=deletepmID=1 Fix: Wait for a fix. Or never surf in other sites,...

woltlab-xsrf.txt

Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability by NBBN Founed: December 2007 Type: Cross-Site Request Forgery Code: An attacker can send a link to a site with this code to a moderator/administrator and then the thread with the threadid are going to be deleted, when the...

Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability

Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability by NBBN Founed: December 2007 Type: Cross-Site Request Forgery Code: html head /head body onLoad="javascript:document.it.submit" form action="http://localhost/xampp/wbb2/modcp.php" method="post" name="it" input type="hidden"...

Woltlab Burning Board Lite Search.PHP多个SQL注入漏洞

BUGTRAQ ID: 26973 CNCAN ID:CNCAN-2007122403 Woltlab Burning Board Lite是一款基于PHP的WEB应用程序。 Woltlab Burning Board Lite不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'Search.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WoltLab Burning Board Lite 1.0.2 目前没有解决方案提供：...

CVE-2007-6518

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...

CVE-2007-6518

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...

Sql injection

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...

CVE-2007-6518

WoltLab Burning Board Lite 1.0.2 pl3e (search.php) contains multiple SQL injection vulnerabilities exploitable via the showposts, sortby, and sortorder parameters. Remote attackers could manipulate SQL queries, potentially impacting data confidentiality, integrity, and availability as indicated b...

Woltlab Burning Board Lite "search.php" SQL Injection Vulnerabilities

Multiple vulnerabilities have been identified in Woltlab Burning Board Lite, which could be exploited by remote attackers to execute arbitrary SQL queries. These issues are caused by input validation errors in the "search.php" script when processing the "showposts", "sortby" and "sortorder"...

Woltlab Burning Board Lite Search.PHP SQL注入漏洞

BUGTRAQ ID: 26973 CNCAN ID:CNCAN-2007122407 Woltlab Burning Board Lite是一款基于PHP的WEB应用程序。 Woltlab Burning Board Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WoltLab Burning Board Lite 1.0.2 目前没有解决方案提供：...

Woltlab Burning Board 1.0.2 SQL-Injection Vulnerability

In Woltlab Burning Board Lite1.0.2 is a SQL-Injection Vulnerability in file: search.php : Line: 510-515 if!$savepostids eval"error"".$tpl-get"errorsearchnoresult"."";"; $result=$db-queryfirst"SELECT searchid FROM bb".$n."searchs WHERE postids='$savepostids' AND showposts='$POSTshowposts' AND...

wbb-sql.txt

In Woltlab Burning Board Lite1.0.2 is a SQL-Injection Vulnerability in file: search.php : Line: 510-515 if!$savepostids eval"error"".$tpl-get"errorsearchnoresult"."";"; $result=$db-queryfirst"SELECT searchid FROM bb".$n."searchs WHERE postids='$savepostids' AND showposts='$POSTshowposts' AND...

CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...

Sql injection

SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...