583 matches found
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 2
Exploit for unknown platform in category web applications ======================================================================== Woltlab Burning Board = 1.0.2, 2.3.6 search.php SQL Injection Exploit 2 ======================================================================== !/usr/bin/perl Woltla...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3
Exploit for unknown platform in category web applications ======================================================================== Woltlab Burning Board Exploiting...\n"; my $url = shift; my $id = shift; my $sstring = shift; my $ua = LWP::UserAgent-new; my $request = new HTTP::Request'POST',...
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (1)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 1 ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over...
CVE-2006-6289
Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...
CVE-2006-6289
Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...
CVE-2006-6289
Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...
CVE-2006-6289
Technical details about CVE-2006-6289 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2006-6237
SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...
CVE-2006-6237
SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...
CVE-2006-6237
The CVE-2006-6237 entry describes a SQL injection in Woltlab Burning Board Lite 1.0.2, via the decode_cookie function in thread.php. An attacker can send a crafted threadvisit Cookie parameter to trigger arbitrary SQL execution, with remote, unauthenticated access. The available documents confirm...
CVE-2006-6237
SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
Woltlab Burning Board 2.3.x - 'register.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21370/info Woltlab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
Woltlab Burning Board 2.3.x - register.php Cross-Site Scripting
Woltlab Burning Board 2.3.x - register.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21370/info Woltlab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue t...
Woltlab Burning Board WBB_UserID SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的'WBBUserID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 WoltLab Burning Board Lite 1.0.2 http://www.woltlab.de/products/burningboardlite/indexen.php...
WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection
The remote version of Burning Board Lite fails to sanitize user- supplied cookie input before using it in the 'decodecookie' function in a database query. Regardless of PHP settings, an unauthenticated attacker may be able to leverage this issue to uncover sensitive information such as password...
WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection
The remote version of Burning Board Lite fails to sanitize input to the 'wbbuserid' parameter before using it in a database query. Provided PHP's 'registerglobals' setting is enabled and 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncove...
Woltlab Burning Board Lite 1.0.2 decode_cookie() SQL Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 decodecookie sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "Powered by Burning Board Lite...
Woltlab Burning Board Lite 1.0.2 Blind SQL Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "Powered by...
Wolflab Burning Board Lite 1.0.2 two sql injections
Wolflab Burning Board Lite 1.0.2 decodecookie sql injection exploit: http://retrogod.altervista.org/wbblite102sqlmqgbypass.html Wolflab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit: http://retrogod.altervista.org/wbblite102sql.html...