minibb2-rfi.txt

Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...

New Bug MiniBB Forum <= 2 Remote File Include (index.php)

Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...

CVE-2006-5674

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5673

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5674

CVE-2006-5674 describes multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the pathToFiles parameter to one of: bb_func_forums.php, bb_functions.php, or the RSS ...

CVE-2006-5673

Summary: CVE-2006-5673 affects MiniBB prior to a fixed version (2.0.2 and earlier) and is caused by improper sanitization of the pathToFiles parameter in the PHP script bb_func_txt.php when PHP register_globals is enabled. An unauthenticated attacker could request a remote file include, potential...

CVE-2006-5674

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5673

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

MiniBB bb_func_txt.php远程文件包含漏洞

MiniBB（Minimalistic Bulletin Board）是一个线性的可定制电子布告栏程序。 MiniBB在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 MiniBB的bbfunctxt.php文件没有正确地验证pathToFiles参数的输入，允许攻击者通过包含本地或外部资源的文件导致执行任意PHP代码。成功攻击要求打开了registerglobals。 MiniBB MiniBB = 2.0.2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

MiniBB 2.0.2 - bb_func_txt.php Remote File Inclusion

MiniBB 2.0.2 - bbfunctxt.php Remote File Inclusion !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: ::::...

miniBB <= 2.0.2 (bb_func_txt.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================= miniBB = 2.0.2 bbfunctxt.php Remote File Include Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? print ' :::::::::...

MiniBB 2.0.2 - 'bb_func_txt.php' Remote File Inclusion

!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

miniBB keyword_replacer &lt;= 1.0 [pathToFiles] Remote File Include Vulnerability

--------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...

miniBB keyword_replacer <= 1.0 (pathToFiles) File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= miniBB keywordreplacer = 1.0 pathToFiles File Include Vulnerability =======================================================================...

MiniBB keyword_replacer 1.0 - pathToFiles File Inclusion

MiniBB keywordreplacer 1.0 - pathToFiles File Inclusion --------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By...

miniBB keyword_replacer &lt;= 1.0 (pathToFiles) File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian...

MiniBB keyword_replacer 1.0 - 'pathToFiles' File Inclusion

--------------------------------------------------------------------------- miniBB keywordreplacer = 1.0 pathToFiles Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...

Update Protection against MiniBB Remote File Vulnerabilities

MiniBB is a free forum software, an original PHP message board script that a user can build online community on. Vulnerabilities in MiniBB Forum may allow a remote attacker to execute arbitrary PHP code via a specially crafted URL...

CVE-2006-4023

The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.ph...

CVE-2006-4023

The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.ph...