CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

CVE-2005-0413

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the fid in forum.php, 2 the member parameter in member.php, 3 the email parameter in forgot.php, or 4 the nbuser or nbpass parameters in include.php. NOTE: it was later reporte...

myPHP Forum v1, 2 & 3

PHOX: myPHP Forum v1, 2 & 3 Exploits Content - Credits - SMFDBPWNOCS - Solution - Contact Credits Exploit discovered by Phoxpherus Phorce, Phox R&P, Terencentanio Root32 SMFDBPWNOCS - Stupid Mofo Database Spamming When No One Can See In short, forum.php and topic.php have no validation checks. Th...

my.phpforum.1.0.txt

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...

CVE-2005-0413

CVE-2005-0413 describes multiple SQL injection vulnerabilities in MyPHP Forum 1.0. The affected components are forum.php (fid), member.php (member), forgot.php (email), and include.php (nbuser/nbpass). The issues allow remote SQL execution and have the CVSS 2.0 base score of 7.5 (HIGH) with netwo...

CVE-2005-0413

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the fid in forum.php, 2 the member parameter in member.php, 3 the email parameter in forgot.php, or 4 the nbuser or nbpass parameters in include.php. NOTE: it was later reporte...

[SA14205] MyPHP Forum Multiple SQL Injection Vulnerabilities

TITLE: MyPHP Forum Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14205 VERIFY ADVISORY: http://secunia.com/advisories/14205/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MyPHP Forum 1.x http://secunia.com/product/4631/ DESCRIPTION: foster...

MyPHP Forum 1.0 - SQL Injection

MyPHP Forum 1.0 - SQL Injection /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...

MyPHP Forum 1.0 SQL Injection Exploit

No description provided by source. /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...

MyPHP Forum 1.0 SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================== MyPHP Forum 1.0 SQL Injection Exploit ===================================== /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL:...

MyPHP Forum 1.0 - SQL Injection

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...