9763 matches found
CVE-2008-1323
Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...
CVE-2008-1323
Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...
CVE-2008-1323
The CVE-2008-1323 entry documents a CSRF vulnerability in WoltLab Burning Board Lite (wBB) 2 Beta 1, where index.php’s ThreadDelete action can be abused by an attacker to delete threads as other users. This is triggered via forged requests, enabling unauthorized modification of data (thread delet...
woltlab-csrf.txt
WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability Vendor: woltlab.de Version: Lite 2 Beta 1 Released: March 6 2008 Bug found by NBBN on March 8 2008 ::Example ::Fix No codefix...
CVE-2008-1323: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...
WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability
WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability Vendor: woltlab.de Version: Lite 2 Beta 1 Released: March 6 2008 Bug found by NBBN on March 8 2008 ::Example htmlhead/headbody onLoad="javascript:document.attack.submit" form action="http://site.tld/wbblite/index.php"...
Directory traversal
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...
CVE-2008-0458
CVE-2008-0458 describes a directory traversal vulnerability in SLAED CMS 2.5 Lite. The flaw exists in index.php’s newlang parameter, where a .. path component in the parameter can cause local file inclusion and arbitrary code execution. Affected component: function/sources.php (LITE version). Thi...
SLAED CMS 2.5 Lite (newlang) Local File Inclusion Vulnerability
No description provided by source. SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang, $language,...
SLAED CMS 2.5 Lite - newlang Local File Inclusion
SLAED CMS 2.5 Lite - newlang Local File Inclusion SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang,...
CVE-2007-6518
WoltLab Burning Board Lite 1.0.2 pl3e (search.php) contains multiple SQL injection vulnerabilities exploitable via the showposts, sortby, and sortorder parameters. Remote attackers could manipulate SQL queries, potentially impacting data confidentiality, integrity, and availability as indicated b...
Woltlab Burning Board Lite "search.php" SQL Injection Vulnerabilities
Multiple vulnerabilities have been identified in Woltlab Burning Board Lite, which could be exploited by remote attackers to execute arbitrary SQL queries. These issues are caused by input validation errors in the "search.php" script when processing the "showposts", "sortby" and "sortorder"...
CVE-2007-6518: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...
coolshot-sql.txt
Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...
Satel Lite - Satellite.php Local File Inclusion
Satel Lite - Satellite.php Local File Inclusion source: https://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information...
Satel Lite - 'Satellite.php' Local File Inclusion
source: https://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information and to execute local script code in the context ...
CoolShot E-Lite POS 1.0 - Login SQL Injection
CoolShot E-Lite POS 1.0 - Login SQL Injection source: https://www.securityfocus.com/bid/26558/info E-lite POS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
CoolShot E-Lite POS 1.0 - Login SQL Injection
source: https://www.securityfocus.com/bid/26558/info E-lite POS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Cross site scripting
Cross-site scripting XSS vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter...