Cross site scripting

Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4677

CVE-2009-4677 is an XSS vulnerability in the search.php of phpFK PHP Forum ohne 7.0.4. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. The provided documents confirm the affected product/version and the vulnerable parameter (search). No explicit ...

PHP Forum Ohne My SQL Shell Upload

PHP Forum ohne My SQL Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : Powered by GL-SH DEAF forum 6.5.5 final. + or dork:"PHP Forum ohne My SQL" "thema.php?board"" The exploit :...

PHP Forum ohne My SQL Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== PHP Forum ohne My SQL Remote File Upload Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

PHP Forum ohne My SQL Remote File Upload Vulnerability

No description provided by source. PHP Forum ohne My SQL Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : Powered by GL-SH DEAF forum 6.5.5 final. + or dork:"PHP Forum ohne My SQL" "thema.php?board"" Th...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2009-3202

CVE-2009-3202 describes a cross-site scripting (XSS) vulnerability in the search.php component of ULoKI PHP Forum 2.1. The issue allows remote attackers to inject arbitrary web script or HTML via the term parameter, potentially affecting users who interact with search results. The available detai...

UloKI PHP Forum 2.1 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

CVE-2008-4355

The CVE-2008-4355 issue affects Powie PSCRIPT Forum (aka PHP Forum or pForum) versions ≤ 1.30, where showprofil.php is vulnerable to SQL injection via the id parameter. The underlying flaw allows remote attackers to manipulate SQL queries and potentially impact data integrity and confidentiality....

MyBB 1.4.2存在多个安全漏洞

BUGTRAQ ID: 31295 CNCAN ID：CNCAN-2008092311 MyBB是一款基于PHP的论坛程序。 MyBB不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本等攻击。 -通过URL传递的输入在返回给用户前缺少过滤，可导致在目标用户浏览器上执行任意HTML和脚本代码。 -文件global.php, announcements.php, admin/inc/classpage.php, inc/functions.php, inc/datahandlers/post.php, inc/classerror.php, polls.php,...

pforum-sql.txt

===================================================================================================== Powie's PHP Forum = v1.30 showprofil Remote SQL Injection Exploit ===================================================================================================== Critical Level : Dangerous...

IPTBB 0.5.6 - 'act' Local File Inclusion

/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm IPTBB is a...

IPTBB 0.5.4 - id SQL Injection

IPTBB 0.5.4 - id SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

CVE-2007-2182

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

CVE-2007-2182

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

CVE-2007-2182

The CVE concerns an unrestricted file upload vulnerability in Maran PHP Forum’s forum_write.php. The issue arises from allowing a trailing %00 in a filename in the page parameter, enabling remote attackers to upload and execute arbitrary PHP files. The documented impact is partial confidentiality...

Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + &nbsp...