CVE-2006-6593

CVE-2006-6593: PHP remote file inclusion in zufallscodepart.php of AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Documented impact is partial confidentiality/integrity/availability. Connected sources confirm the RFI root c...

CVE-2006-6593: Undefined Security Weakness

PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

mxBB Module ErrorDocs 1.0 (common.php) Remote Inclusion Vulnerability

No description provided by source. = mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rphin + Exploit:...

mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion

mxBB Module ErrorDocs 1.0 - common.php Remote File Inclusion = mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rph...

mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion

= mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rphin + Exploit:...

AdamIsmayPrintTopicModSQL注入漏洞 Exploit

No description provided by source. Bartek Nowotarski （[email protected]）提供了如下测试方法：...

CVE-2006-6369

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

CVE-2006-6369

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

CVE-2006-6369

CVE-2006-6369 is an SQL injection in the Invision Community Blog Mod 1.2.4. The flaw is in the file lib/entry_reply_entry.php and is exploitable via the eid parameter when the message is previewed, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the af...

CVE-2006-6369: Undefined Security Weakness

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

security flaw

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability

No description provided by source. 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this S...

Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Invision Community Blog Mod 1.2.4 SQL Injection Vulnerability ============================================================= 1. Open any blog entry 2. Try to reply to any message...

Invision Community Blog Mod 1.2.4 - SQL Injection

Invision Community Blog Mod 1.2.4 - SQL Injection 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid...

Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability

Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this SQL Injection: BLOGENTRYID UNION...

Hacks List phpBB Mod <= 1.21 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Hacks List phpBB Mod = 1.21 Remote SQL Injection Vulnerability =============================================================== Admin Hacks List v1.20 Remote SQL Injection...

Hacks List phpBB Mod 1.21 - SQL Injection

Hacks List phpBB Mod 1.21 - SQL Injection Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

Hacks List phpBB Mod 1.21 - SQL Injection

Admin Hacks List v1.20 Remote SQL Injection Vulnerability Download: http://www.nivisec.com Found By: the master exploit:...

CVE-2006-5989

Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...

mxBB Module calsnails 1.06 (mx_common.php) File Include Vulnerability

No description provided by source. mxBB calsnails module 1.06 Remote File Inclusion Vulnerability Bugfounder: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Gr33tings: nukedx, DeeJay, TheJT, str0ke Mod-Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=21...