miniBB BB_FUNC_SEARCH.PHP SQL注入漏洞

miniBB是一款基于PHP的WEB应用程序。 miniBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'BBFUNCSEARCH.PHP'脚本对用户提交的'table'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 MiniBB MiniBB 2.1 - Apache Software Foundation Apache 1.3.24 - Apache Software Foundation Apache 1.3.23 - Apache Software...

minibb-sql.txt

vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under : '-----------------------------------------------------------------------------' cod...

miniBB 2.1 (table) Remote SQL Injection Vulnerability

No description provided by source. vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under :...

CVE-2007-5719

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

Sql injection

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

CVE-2007-5719

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

CVE-2007-5719

CVE-2007-5719 affects miniBB 2.1, with a vulnerability in bb_func_search.php allowing SQL injection via the table parameter to index.php. This enables remote attackers to execute arbitrary SQL commands. The provided documents do not include a confirmed remediation or patch details.

miniBB 2.1 (table) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== miniBB 2.1 table Remote SQL Injection Vulnerability ===================================================== vuln.: miniBB 2.1 table Remote SQL Injection Exploit download:...

MiniBB 2.1 - 'table' SQL Injection

vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under : '-----------------------------------------------------------------------------' cod...

MiniBB 2.1 - table SQL Injection

MiniBB 2.1 - table SQL Injection vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under :...

CVE-2007-5719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

CVE-2007-3272

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...

Directory traversal

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...

CVE-2007-3272

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...

CVE-2007-3272

CVE-2007-3272 affects MiniBB 2.0.5. The vulnerability is a directory traversal in index.php where an attacker can read arbitrary files by manipulating the language parameter in a register action (via ..). Documents do not provide exploitation steps, affected versions beyond 2.0.5, or explicit rem...

CVE-2007-3272: Undefined Security Weakness

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a .. dot dot in the language parameter in a register action...

minibb205-lfi.txt

? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- !...

MiniBB 2.0.5 (language) Local File Inclusion Exploit

No description provided by source. ? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

MiniBB 2.0.5 - Language Local File Inclusion

MiniBB 2.0.5 - Language Local File Inclusion ? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

MiniBB 2.0.5 (language) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================== MiniBB 2.0.5 language Local File Inclusion Exploit ==================================================== ? / \|/// \ - - // @ @...