CVE-2007-1518

SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...

CVE-2007-1518

The CVE-2007-1518 entry describes a SQL injection in Woltlab Burning Board (wBB) 2.x, via usergroups.php where an attacker can manipulate the array index of applicationids to execute arbitrary SQL. The root cause is input handling that allows SQL commands through an array index, enabling remote e...

Woltlab Burning Board UserGroups.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...

Woltlab Burning Board 2.x - usergroups.php SQL Injection

Woltlab Burning Board 2.x - usergroups.php SQL Injection !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings; use...

Woltlab Burning Board 2.x - 'usergroups.php' SQL Injection

!/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings; use LWP::UserAgent; use HTTP::Response; use HTTP::Status; us...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board 2.x usergroups.php Remote SQL Injection Exploit ======================================================================= !/usr/bin/perl Woltlab...

Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...

Woltab Burning Board SQL Injection usergroups.php

Hi, A new SQL Injection in the wbb2.x CODE / delete applications groupleader / if $action == 'groupleadersdeleteapplications' $deleteids = array; if isarray$POST'applicationids' while list$applicationid, $val = each$POST'applicationids' if $val == 1 $deleteids = $applicationid; if $deleteids...

CVE-2007-1443

Multiple cross-site scripting XSS vulnerabilities in register.php in Woltlab Burning Board wBB 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the 1 rusername, 2 remail, 3 rpassword, 4 rconfirmpassword, 5 rhomepage, 6 ricq, 7 raim, 8 ryim, ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register.php in Woltlab Burning Board wBB 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the 1 rusername, 2 remail, 3 rpassword, 4 rconfirmpassword, 5 rhomepage, 6 ricq, 7 raim, 8 ryim, ...

CVE-2007-1443

CVE-2007-1443 covers multiple reflected cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) 2.3.6 and Burning Board Lite 1.0.2pl3e, exploitable via the register.php form fields (r_username, r_email, r_password, r_confirmpassword, r_homepage, …, r_timezoneoffset, r_usewysiwyg...

woltlab236-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: Woltlab Burning Board wbb | Version: 2.3.6 others not testet | Vuln./Exploit Type:...

Woltlab Burning Board 2.3.6 - Multiple HTML Injection Vulnerabilities

Woltlab Burning Board 2.3.6 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/22796/info Woltlab Burning Board is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allo...

Woltlab Burning Board 2.3.6 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/22796/info Woltlab Burning Board is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script code in the context of the...

Woltlab Burning Board Lite Pms.PHP SQL注入漏洞

Woltlab Burning Board Lite是一款基于PHP的WEB应用程序。 Woltlab Burning Board Lite不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Pms.PHP'脚本对用户提交的'$POST'pmid''参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Woltlab Burning Board Lite 1.0.2pl3e 目前没有解决方案提供：...

CVE-2007-0812

SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...

Sql injection

SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...

CVE-2007-0812

SQL injection in pms.php of Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier; remote authenticated users can execute arbitrary SQL via pmid[0]. Affected: wBB Lite

CVE-2007-0812

SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...

Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit

No description provided by source. ?php printr' ------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2pl3e pms.php / sql injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: "Powered by Burnin...