19 matches found
EUVD-2011-4990
Malware in sbrugna...
EUVD-2011-4991
Malware in sbrugna...
CVE-2011-5091
Multiple SQL injection vulnerabilities in GR Board aka grboard 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the 1 tableType or 2 blindTarget parameter to view.php, 3 the delTargets0 parameter to viewmemo.php, or 4 the isReported parameter to writeok.php...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
CVE-2011-5091
Multiple SQL injection vulnerabilities in GR Board aka grboard 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the 1 tableType or 2 blindTarget parameter to view.php, 3 the delTargets0 parameter to viewmemo.php, or 4 the isReported parameter to writeok.php...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
Sql injection
Multiple SQL injection vulnerabilities in GR Board aka grboard 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the 1 tableType or 2 blindTarget parameter to view.php, 3 the delTargets0 parameter to viewmemo.php, or 4 the isReported parameter to writeok.php...
Authentication flaw
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
CVE-2011-5091
Multiple SQL injection vulnerabilities in GR Board aka grboard 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the 1 tableType or 2 blindTarget parameter to view.php, 3 the delTargets0 parameter to viewmemo.php, or 4 the isReported parameter to writeok.php...
CVE-2011-5090
GR Board (grboard) version 1.8.6.5 Community Edition exposes an unauthenticated ability to modify or delete data via specific endpoints: mod_rewrite.php, comment_write_ok.php, poll/index.php, update/index.php, trackback.php, or an arbitrary poll.php under theme/. The issue stems from missing auth...
PT-2012-2069 · Gr Board · Gboard
Name of the Vulnerable Software and Affected Versions: GR Board version 1.8.6.5 Community Edition Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the tableType or blindTarget parameter to "view.php", the delTargets0 parameter to "view...
PT-2012-2068 · Gr Board · Gboard
Name of the Vulnerable Software and Affected Versions: GR Board aka grboard version 1.8.6.5 Community Edition Description: The issue allows remote attackers to modify or delete data without requiring authentication for certain database actions. This can be achieved by sending a request to specifi...
CVE-2011-5091
GR Board (aka grboard) 1.8.6.5 Community Edition is affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via: view.php parameters tableType or blindTarget, view_memo.php parameter delTargets[0], or write_ok.php parameter isReported. The root caus...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion Vulnerability
======================================================== GR Board v1.8.6.1 stab page.php?theme Remote File Inclusion Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 ...
GR Board v1.8.6. (theme) Local File Inclusion Vulnerability
Exploit for php platform in category web applications =========================================================== GR Board v1.8.6. theme Local File Inclusion Vulnerability ===========================================================...
GR Board 1.8.6.1 Remote File Inclusion
======================================================== GR Board v1.8.6.1 stab page.php?theme Remote File Inclusion Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
GR Board 1.8.6 - page.php Remote File Inclusion
GR Board 1.8.6 - page.php Remote File Inclusion source: https://www.securityfocus.com/bid/40437/info GR Board is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application an...
GR Board 1.8.6 - 'page.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/40437/info GR Board is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...