CVE-2006-5787

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...

CVE-2006-5788

CVE-2006-5788 is a documented PHP remote file inclusion in IPrimal Forums, affecting the scripts (1) index.php and (2) admin/index.php. The underlying issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the p parameter, as described in multiple sources. The availabl...

CVE-2006-5787

CVE-2006-5787 affects IPrimal Forums : the vulnerability resides in admin/index.php (as of 20061105) allowing remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an issue in admin/chk_admin.php . The provided sources describe the affected ...

EUVD-2006-5772

PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...

CVE-2006-5788

PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...

CVE-2006-5787

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...

CVE-2006-5787: Undefined Security Weakness

admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chkadmin.php...

iPrimal Forums (admin/index.php) Change User Password Exploit

No description provided by source. !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGV4 else &start ; sub start $host=$ARGV0; $path=$ARGV1; $user=$ARGV2; $passwd=$ARGV3;...

CVE-2006-5788: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in 1 index.php and 2 admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter...

iPrimal Forums (admin/index.php) Change User Password Exploit

Exploit for unknown platform in category web applications ============================================================= iPrimal Forums admin/index.php Change User Password Exploit ============================================================= !perl Bl0od3r Germany shoutzz to all members of dC3 cre...

iPrimal Forums - '/admin/index.php' Change User Password

!perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST ".$path."admin/index.php?p=members&edit=".$user."...

iPrimal Forums - adminindex.php Change User Password

iPrimal Forums - adminindex.php Change User Password !perl http://ipigroup.org/downloads/forums.zip Bl0od3r Germany shoutzz to all members of dC3 crew ,matrixkiller,eddie14 special to str0ke use IO::Socket; if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort="80" or die "Error"; print $sock "POST...

CVE-2006-5635

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5635

CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...

CVE-2006-5635: Undefined Security Weakness

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5635

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

HostingController6.1.txt

Hosting Controller 'EnableForum.asp' and 'DisableForum.asp' Scripts Let Remote Users Create or Delete Forums and Virtual Directories advisory : http://www.kapda.ir/advisory-442.html http://securitytracker.com/alerts/2006/Oct/1017103.html SQLInjection, Command Injection ------- KAPDA::59 - Hosting...

CVE-2006-5603

SQL injection vulnerability in popmail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5603

SQL injection vulnerability in popmail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5603

The software Snitz Forums 2000 version 3.4.06 is vulnerable to an SQL injection vulnerability in the pop_mail.asp file. The root cause is the failure to sufficiently sanitize user-supplied data, specifically via the RC parameter , allowing remote attackers to execute arbitrary SQL commands. Succe...