CVE-2008-0133: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to catmain.php and the 2 cat parameter to forum.php in a liste action...

jPORTAL 2.3.1 & UserPatch - 'forum.php' Remote Code Execution

 $host = $argv1; $path = $argv2; $phpcode = $argv3; $info = "\n\n". " jPORTAL 2.3.1 & UserPatch forum.php Remote PHP Code Execution Exploit\n". "\n". " author: irk4zatyahoo.pl\n". " http://irk4z.wordpress.com\n". "\n". "\n". " greetz: str0ke, wacky, polish under :\n"...

Directory traversal

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5822

The CVE-2007-5822 entry affects Ben Ng Scribe 0.2 and earlier, where a flaw in forum.php allows direct static code injection. An attacker can leverage the username parameter in the Register action to cause remote PHP code to be written into a file under regged/. The root cause appears to be impro...

CVE-2007-5823: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...

CVE-2007-5822: Improper Control of Generation of Code

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...

lustig.cms Forum.PHP远程文件包含漏洞

lustig.cms是一款基于PHP的WEB应用程序。 lustig.cms不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'view'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 lustig.cms 2.5 beta 目前没有解决方案提供： http://lustig.cwsurf.de/cms/ http://www.example.com/forum/forum.php?view=Shell...

lustig.cms BETA 2.5 (forum.php view) Remote File Inclusion Vulnerability

No description provided by source. lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell sebug.net...

CVE-2007-5138: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

lustigcms-rfi.txt

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell...

lustig.cms BETA 2.5 (forum.php view) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerability ======================================================================== lustig.cms BETA 2.5...

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC :...

lustig.cms Beta 2.5 - 'forum.php?view' Remote File Inclusion

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell milw0rm.com 2007-09-27...

phpbg-rfi.txt

phpBG 0.9.1 rootdir Remote File Inclusion Vulnerability D.Script: http://phpbg.sourceforge.net/ POC: /intern/admin/other/backup.php?admin=1&rootdir=Shell /intern/admin/?rootdir=Shell /intern/clan/memberadd.php?rootdir=Shell /intern/config/key2.php?rootdir=Shell...

CVE-2007-4089: Undefined Security Weakness

Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to 1 forum.php, 2 cp.php, and possibly other unspecified components...

Vikingboard 0.1.2 - forum.php Information Disclosure

Vikingboard 0.1.2 - forum.php Information Disclosure source: https://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is...

vbzoom 1.x (forum.php MainID) Remote SQL Injection Vulnerability

No description provided by source. --/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH &n...

vbzoom 1.x (forum.php MainID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ vbzoom 1.x forum.php MainID Remote SQL Injection Vulnerability ================================================================ --/ Long Life Palestine -- HHHHHH HHHHHH HH...

vbzoom1x-sql.txt

--/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHH HH HH HH HH HHH HHHHH HH H...

vbzoom 1.x - forum.php?MainID SQL Injection

vbzoom 1.x - forum.php?MainID SQL Injection --/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH ...