EUVD-2008-6917

Malware in sbrugna...

EUVD-2008-6916

Malware in sbrugna...

Discuz! 'name'参数SQL注入漏洞

Bugraq ID: 37556 Comsenz Discuz!是一款流行的论坛程序。 Comsenz Discuz!存在输入验证错误，远程攻击者可以利用漏洞进行SQL注入攻击，获得密码HASH等敏感信息。 问题是'misc.php'脚本对'name'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Comsenz Discuz! 7.x 目前没有解决方案提供： http://www.discuz.com/ !/usr/bin/perl use IO::Socket; print q Discuz Remote SQL Injection...

Discuz v1.0 SQL Injection Exploit Vulnerability

No description provided by source. ======================================================================================== | Title : Discuz Remote SQL Injection Exploit Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Discuz <= 1.03 SQL Injection Exploit Vulnerability

Exploit for unknown platform in category web applications ================================================== Discuz = 1.03 SQL Injection Exploit Vulnerability ================================================== =======================================================================================...

Code injection

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...

CVE-2008-6957

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

Design/Logic Flaw

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

CVE-2008-6957

CVE-2008-6957 affects Crossday Discuz! Board (member.php) and allows remote attackers to reset passwords of arbitrary users via crafted lostpasswd and getpasswd actions, potentially due to predictable generation of the id parameter. The vulnerability is network-exposed with low attack complexity ...

CVE-2008-6957

member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted 1 lostpasswd and 2 getpasswd actions, possibly involving predictable generation of the id parameter...

CVE-2008-6958

CVE-2008-6958 affects Crossday Discuz! Board 6.x and 7.x. The vulnerability resides in wap/index.php where remote authenticated users can execute arbitrary PHP code via the creditsformula parameter. Evidence in multiple feeds confirms the issue and its description; no explicit mitigation or patch...

CVE-2008-6958

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...