2266 matches found
MyBulletinBoard (MyBB) <= 1.2.10 Multiple Remote Vulnerabilities
No description provided by source. waraxe-2008-SA061 - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Independent discovery: koziolek Date: 16. January 2008 Location: Estonia, Tartu Web:...
MyBB < 1.2.11 forumdisplay.php sortby Parameter Command Execution
Binary data 4346.prm...
MyBB forumdisplay.php 'sortby' Parameter Arbitrary PHP Code Execution
The version of MyBB installed on the remote host is affected by an arbitrary PHP code execution vulnerability due to improper sanitization of user-supplied input to the 'sortby' parameter of the forumdisplay.php script before using it in an eval statement to evaluate PHP code. A remote,...
MyBulletinBoard (MyBB) <= 1.2.10 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== MyBulletinBoard MyBB = 1.2.10 Remote Code Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ?php //...
MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities
MyBulletinBoard MyBB 1.2.10 - Multiple Vulnerabilities waraxe-2008-SA061 - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Independent discovery: koziolek Date: 16. January 2008 Location: Estonia, Tar...
MyBulletinBoard (MyBB) <= 1.2.10 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ MyBulletinBoard MyBB = 1.2.10 Multiple Remote Vulnerabilities ================================================================ waraxe-2008-SA061 - Remote Code Execution in My...
MyBB 1.2.10 - moderation.php Multiple SQL Injections
MyBB 1.2.10 - moderation.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27323/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
MyBB 1.2.10 - 'moderation.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/27323/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...
MyBulletinBoard (MyBB) 1.2.10 - Multiple Vulnerabilities
waraxe-2008-SA061 - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Independent discovery: koziolek Date: 16. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-61.html Target...
MyBulletinBoard (MyBB) 1.2.10 - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc5 print "-------------------------------------------------------------------------\r\n"; print " MyBB = 1.2.10 Remote Code Execution...
mkportal-sql.txt
?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...
MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit
No description provided by source. ?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stabl...
MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...
MKPortal 1.1.1 reviews / Gallery modules - SQL Injection
?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...
Design/Logic Flaw
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...
CVE-2007-0689
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...
CVE-2007-0689
CVE-2007-0689 affects MyBB 1.2.4. The vulnerability discloses the server installation path via three vectors: (1) MyBB member.php? and action[] parameter, (2) captcha.php?imagehash[] parameter, and (3) a direct request to inc/datahandlers/event.php. The common root cause is error message handling...
CVE-2007-0689
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...
[Full-disclosure] MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 17 MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles...