EUVD-2005-0570

Malware in sbrugna...

EUVD-2008-5412

Malware in sbrugna...

Punbb 1.3.4 - Multiple Full Path Disclosure Vulnerability

No description provided by source. Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file...

Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

CVE-2008-5435

CVE-2008-5435 concerns an XSS vulnerability in PunBB, exposed in moderate.php for PunBB versions prior to 1.3.1. The issue allows remote attackers to inject arbitrary web script or HTML via a topic subject, potentially impacting integrity (partial) and not confidentiality or availability, per the...

Code injection

Invision Power Board IPB before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving 1 the posticon variable in classes/post/classpost.php and 2 the df value in actionpublic/moderate.php...

advisory003.txt

============================================== SQL Injections in punbb-1.2.1 moderate.php ============================================== Description ----------- Improper handling of several arguments in moderate.php allows a malicious moderator or admin to inject arbitrary SQL statements. This al...