231 matches found
Ultimate PHP Board < 1.9.7 viewforum.php Multiple Vulnerabilities
The remote host is running Ultimate PHP Board UPB. The remote version of this software is vulnerable to cross-site scripting attacks, and SQL injection flaws. Using a specially crafted URL, an attacker may execute arbitrary commands against the remote SQL database or use the remote server to set ...
Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting
Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection
Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection source: https://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
Ultimate PHP Board (UPB) Security Advisory
Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl - Woopie Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB ...
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
Ultimate PHP Board add.php Direct Request Information Disclosure
The remote host is running Ultimate PHP Board UPB. There is a flaw in this version that could allow an attacker to view private message board information. %NASLMINLEVEL 70300 This script was written by Erik Stephens See the Nessus Scripts License for details Changes by Tenable: - Revised plugin...
CVE-2003-1401
login.php in php-Board 1.0 stores plaintext passwords in $username.txt with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information via a direct request...
Множество уязвимостей в Ultimate PHP Board (UPB) Version 1.5
Множество уязвимостей в Ultimate PHP Board UPB Version 1.5 Script: Ultimate PHP Board UPB Version 1.5 Author: PHP Outburst http://www.myupb.com/ Exploit: yes В скриптах: adminmembers.php adminban.php adminbannedaddresses.php adminbanuser.php admincat.php adminconfig.php adminconfigdo.php...
CVE-2003-0395
Ultimate PHP Board UPB 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes adminiplog.php...
UPB: Discussion Board/Web-Site Takeover
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: UPB: Discussion Board/Web-Site Takeover product: Ultimate PHP Board v1.9 latest vendor: www.myupb.com risk: high date: 05/24/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/024.en.txt...
CVE-2003-0395
Ultimate PHP Board UPB 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes adminiplog.php...
Several bugs found in "Spyke's PHP Board"
================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...
CVE-2003-0395: Improper Control of Generation of Code
Ultimate PHP Board UPB 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator executes adminiplog.php...
Ultimate PHP Board 1.9 - admin_iplog.php Arbitrary PHP Execution
Ultimate PHP Board 1.9 - adminiplog.php Arbitrary PHP Execution source: https://www.securityfocus.com/bid/7678/info A vulnerability has been reported in Ultimate PHP Board. The problem is said to occur due to insufficient sanitization of user-supplied input before including log data into a PHP...
Ultimate PHP Board 1.9 - 'admin_iplog.php' Arbitrary PHP Execution
source: https://www.securityfocus.com/bid/7678/info A vulnerability has been reported in Ultimate PHP Board. The problem is said to occur due to insufficient sanitization of user-supplied input before including log data into a PHP file. As a result, it may be possible for a remote attacker to...
php-Board (php)
Informations : °°°°°°°°°°°°°° Website : http://www.hp-planet.de Version : 1 Problem : Informations disclosure PHP Code/Location : °°°°°°°°°°°°°°°°°°° login.php : ----------------------------------------- function passwd2$user $password="nicht registriert"; if fileexists"user/".$user.".txt" $fp =...
PHP-Board 1.0 - User Password Disclosure
PHP-Board 1.0 - User Password Disclosure source: https://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain acce...
PHP-Board 1.0 - User Password Disclosure
source: https://www.securityfocus.com/bid/6862/info php-board user information is stored in flat files on the system hosting the software. Access to the files via the web is not sufficiently restricted. Remote attackers may request user files and gain access to php-board user and administrative...
CVE-2002-1820
register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...
CVE-2002-1821
Ultimate PHP Board UPB 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to 1 adminmembers.php, 2 adminconfig.php, 3 admincat.php, or 4 adminforum.php...