EUVD-2007-2770

Malware in sbrugna...

Molyx Board 2.81 attachment.php页面过滤不严导致源码泄露漏洞

魔力论坛MolyX Board 是魔力系列Web应用软件产品之一，由魔力工作室MolyX Studios 经过数年的市场技术调研及学习研究，在融合了当今众多论坛程序技术和实践优点的基础上，针对中国人的使用习惯开发研制的一款功能强大、速度飞快、性能卓越、安全性极高的论坛系统。其采用PHP及MySql构建，整体架构采用最先进的面向对象思想，在功能、速度、性能、安全及开发理念和创新意识上均超越了目前国内外市场同类产品。魔力论坛推出的短短数月间，就获得了大量用户和业界专家的一致好评和认可，越来越多的用户选择了魔力论坛作为应用网站论坛社区的解决方案。 在attachment.php页面当中 1...

MolyX Board 2.81论坛db_base.php页面SQL注入漏洞

魔力论坛MolyX Board 是魔力系列Web应用软件产品之一，由魔力工作室MolyX Studios 经过数年的市场技术调研及学习研究，在融合了当今众多论坛程序技术和实践优点的基础上，针对中国人的使用习惯开发研制的一款功能强大、速度飞快、性能卓越、安全性极高的论坛系统。 includes/db/dbbase.php 注入 1. function insert$table, $array, $type = 'INSERT', $func = 'queryunbuffered' 2. 3. if $sql = $this-sqlinsert$table, $array, $type 4...

MolyX BOARD 2.5.0 (index.php lang) Local File Inclusion Vulnerability

No description provided by source. =============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ==============================================...

molyx board X_UP_CALLING_LINE_ID sql injection Remote Privilege Exploit

No description provided by source. molyx board XUPCALLINGLINEID sql injection Remote Privilege Exploit !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with php5 or php4&&GPC=off Example: C:\mlexp.pl 127.0.0.1 /bbs/ 1 prepare to connect... + connected prepare to send data... + OK...

Directory traversal

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

CVE-2007-2778

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

CVE-2007-2778

CVE-2007-2778 affects MolyX BOARD 2.5.0 with multiple directory traversal flaws. The vulnerability allows remote attackers to read arbitrary files by supplying a .. (dot dot) path in the lang parameter to index.php and other PHP scripts. The root cause is uncontrolled path traversal in the langua...

CVE-2007-2778

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

molyx-lfi.txt

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...

MolyX BOARD 2.5.0 - index.php?lang Local File Inclusion

MolyX BOARD 2.5.0 - index.php?lang Local File Inclusion =============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0"...

MolyX BOARD 2.5.0 (index.php lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== MolyX BOARD 2.5.0 index.php lang Local File Inclusion Vulnerability ===================================================================== =============== MolyX BOARD 2.5...

MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...