EUVD-2007-5550

Malware in sbrugna...

Mambo Component SimpleBoard 1.0.3 - 'catid' SQL Injection

Mambo Simpleboard Forum Component 1.0.3 Stable comsimpleboard Author: it's my, Scipio, xcedz Home page: http://www.antichat.ru Dork: inurl:"index.php?option=comsimpleboard" Exploit:...

mambosimple-sql.txt

Mambo Simpleboard Forum Component 1.0.3 Stable comsimpleboard Author: it's my, Scipio, xcedz Home page: http://www.antichat.ru Dork: inurl:"index.php?option=comsimpleboard" Exploit:...

CVE-2007-5806: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5575

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...

CVE-2007-5575: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

CVE-2006-5043

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

CVE-2006-5043: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...