583 matches found
Woltlab Burning Board <= 2.2.2/2.3.3 modcp.php SQL injection
Woltlab Burning Board = 2.2.2/2.3.3 modcp.php SQL injection Discovered by R Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.3 Type: SQL-injection Description: -------------------------------- The WoltLab Burning Board is a high customisable board software for every kind of use. SQL...
JGSvulns.txt
SePro Bugtraq WBB Portal - JGS-Portal = 3.0.2 - Multiple Vulnerabilities 09.05.05 Vendor: JGS-XA URL: http://www.jgs-xa.de/ Version: = 3.0.2 Type: SQL-Injections, XSS and Full Path Disclosures Discovered by deluxe89 and the Security-Project Team Description: ------------------------- The JGS-Port...
CVE-2002-2021
CVE-2002-2021 affects WoltLab Burning Board (wbboard) 1.1.1 with a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the message parameter. Multiple connected sources (Red Hat, CVE records, NVD/NIST, CVE List) corroborate the issue. T...
CVE-2002-2021
Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
CVE-2005-2211
CVE-2005-2211 affects Backup Manager 0.5.8a, where insecure temporary file creation enables local users to perform unauthorized file operations during CD burning. The description across multiple sources confirms the root cause as insecure handling of temporary files, leading to potential partial ...
woltlabXSS231.txt
SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...
Woltlab Burning Board <= 2.3.1 register.php SQL-Injection Exploit
Exploit for unknown platform in category web applications ================================================================= Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=...
Woltlab Burning Board <= 2.3.1 register.php SQL-Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board = 2.3.1 Exploit Vulnerability discovered by GulfTech Security Research Visit www.security-project.org Exploit by deluxe89 ---------- "; my $host = 'www.security-project.org'; my...
Woltlab Burning Board 2.3.1 - register.php SQL Injection
Woltlab Burning Board 2.3.1 - register.php SQL Injection !/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=97;$c103;$c++ if&test$i, $c, 1...
Woltlab Burning Board 2.3.1 - 'register.php' SQL Injection
!/usr/bin/perl use strict; use IO::Socket::INET; $| = print " Woltlab Burning Board $addr, PeerPort = $port, Proto = 'tcp', Timeout = 8 or die'- Could not connect to server'; if&test$i, 96 buchstabe formy $c=97;$c103;$c++ if&test$i, $c, 1 print pack'c', $c; last; else zahl print "0-4\n"; formy...
CVE-2005-1642
SQL injection vulnerability in the verifyemail function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable...
CVE-2005-1642
SQL injection vulnerability in the verifyemail function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable...
CVE-2005-1642
Concrete details found: CVE-2005-1642 affects Burning Board (Woltlab Burning Board) versions up to 2.3.1 and earlier. The vulnerability is an SQL Injection in the verify_email($email) function, allowing remote attackers to influence SQL queries via the $email variable and potentially access data ...
Woltlab Burning Board SQL Injection Vulnerability
GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...
JGS-Portal for WoltLab Burning Board Multiple Vulnerabilities (SQLi, XSS)
The remote host is running the JGS-Portal, a web portal written in PHP. The remote version of this software contains an input validation flaw leading to multiple SQL injection and cross-site scripting vulnerabilities. An attacker may exploit these flaws to execute arbitrary SQL commands against t...
Woltlab Burning Board pms.php folderid Parameter XSS
The version of Burning Board or Burning Board Lite installed on the remote host may be prone to cross-site scripting attacks due to its failure to properly sanitize input passed to the 'folderid' parameter of the 'pms.php' script. An attacker may be able to exploit this flaw to cause arbitrary HT...
Woltlab Burning Board Detection
The remote host is running Burning Board or Burning Board Lite, message forum software packages that use PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18250; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"...
CVE-2005-0661
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 lastvisit cookie...