100 matches found
CVE-2018-17997
LayerBB 1.1.1 allows XSS via the titles of conversations PMs...
LayerBB 1.1.4 - (search_query) SQL Injection Vulnerability
Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...
LayerBB 1.1.4 SQL Injection
Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Date: 2021-02-19 Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...
LayerBB 1.1.4 - 'search_query' SQL Injection
Exploit Title: LayerBB 1.1.4 - 'searchquery' SQL Injection Date: 2021-02-19 Exploit Author: Görkem Haşin Version: 1.1.4 Tested on: Linux/Windows POST /search.php HTTP/1.1 Host: Target Payload: searchquery=Lffd' AND 8460=SELECT CASE WHEN 8460=8460 THEN 8460 ELSE SELECT 1560 UNION SELECT 2122 END--...
LayerBB < 1.1.4 - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: LayerBB 1.1.3 - Multiple CSRF Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://forum.layerbb.com/downloads.php?view=file&id=30 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2019-16531 1. Description:...
CVE-2019-16531
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
CVE-2019-16531
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
Cross site request forgery (csrf)
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
CVE-2019-16531
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
CVE-2019-16531
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
CVE-2019-16531
CVE-2019-16531 affects LayerBB prior to 1.1.4 and covers multiple CSRF vulnerabilities demonstrated via admin/general.php (e.g., System Settings changes). Public references and Red Hat/EUVD records corroborate CSRF issues across LayerBB 1.1.3, with exploitation details visible in exploit- and pac...
LayerBB 1.1.3 Cross Site Request Forgery
Exploit Title: LayerBB 1.1.3 - Multiple CSRF Date: 4/7/2019 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://forum.layerbb.com/downloads.php?view=file&id=30 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2019-16531 1. Description: LayerBB is a free open-source forum...
PT-2019-14689
Name of the Vulnerable Software and Affected Versions LayerBB versions prior to 1.1.4 Description The issue allows for multiple CSRF problems, which can be demonstrated by modifying the System Settings through the "admin/general.php" endpoint, specifically by exploiting the lack of proper CSRF...
LayerBB 1.1.4 - Cross-Site Request Forgery
LayerBB 1.1.4 - Cross-Site Request Forgery Exploit Title: LayerBB 1.1.3 - Multiple CSRF Date: 4/7/2019 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://forum.layerbb.com/downloads.php?view=file&id=30 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2019-16531 1...
CVE-2019-16531: Cross-Site Request Forgery (CSRF)
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php...
LayerBB < 1.1.4 - Cross-Site Request Forgery
Exploit Title: LayerBB 1.1.3 - Multiple CSRF Date: 4/7/2019 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://forum.layerbb.com/downloads.php?view=file&id=30 Version: 1.1.3 Tested on: Ubuntu 18.04 CVE: CVE-2019-16531 1. Description: LayerBB is a free open-source forum...
LayerBB cross-site scripting vulnerability (CNVD-2019-24206)
LayerBB is a small set of forum software. A cross-site scripting vulnerability exists in LayerBB version 1.1.3. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit this vulnerability to execute client-side code...
LayerBB Code Issues Vulnerabilities
LayerBB is a small set of forum software. A code issue vulnerability exists in LayerBB version 1.1.3, which stems from the program not restricting the customlogo file name suffix. An attacker can exploit this vulnerability to upload arbitrary files...
LayerBB Cross-Site Request Forgery Vulnerability
LayerBB is a small set of forum software. A cross-site request forgery vulnerability exists in LayerBB version 1.1.3. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could use this vulnerability to send...