90 matches found
CVE-2007-2182
Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...
CVE-2007-2182
The CVE concerns an unrestricted file upload vulnerability in Maran PHP Forum’s forum_write.php. The issue arises from allowing a trailing %00 in a filename in the page parameter, enabling remote attackers to upload and execute arbitrary PHP files. The documented impact is partial confidentiality...
CVE-2007-2182: Undefined Security Weakness
Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...
Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + +  ...
Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Maran PHP Forum forumwrite.php Remote Code Execution Vulnerability =====================================================================...
Maran PHP Forum - forum_write.php Remote Code Execution
Maran PHP Forum - forumwrite.php Remote Code Execution -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + +...
Maran PHP Forum - 'forum_write.php' Remote Code Execution
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...
CVE-2006-7088
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...
CVE-2006-7088
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...
CVE-2006-7088
CVE-2006-7088 affects Simple PHP Forum prior to 0.4, with multiple SQL injection vulnerabilities – attackers can craft the username parameter to logon_user.php or update_profile.php to execute arbitrary SQL. The available documents confirm remote exploitation potential and the affected components...
CVE-2006-7088: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...
Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion
Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php"; Exploit:...
vBulletin Forum SWF cross-site vulnerability-vulnerability warning-the black bar safety net
Affected system: VBulletin VBulletin = 3.6.4 Description: BUGTRAQ ID: 2 1 7 3 6 vBulletin is an open source PHP Forum program. vBulletin in processing a malicious SWF file when a vulnerability exists, a remote attacker could exploit this vulnerability to obtain the user's machine and sensitive...
InvisionPowerBoard非授权访问漏洞
Invision Power Board是一款流行的PHP论坛程序。Invision Power Board中存在非授权访问漏洞。攻击者可以通过HTTP GET请求未经充分认证就编辑其他用户的论坛张贴。 Invision Board 1.0-1.3 Final 厂商补丁： Invision PS ----------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：http://www.invisionboard.com/...
CVE-2006-6038: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in editpoll.php in Powie's PHP Forum pForum 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Powie's PHP Forum <= v1.29a (editpoll) Remote SQL Injection Exploit
============================================================================================== Powie's PHP Forum = v1.29a editpoll Remote SQL Injection Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
CVE-2006-1898
CVE-2006-1898 describes multiple cross-site scripting (XSS) vulnerabilities in TinyPHPForum (TPF) 3.6 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in the profile.php view action and (2) a login name. The documents do not provide ...
CVE-2006-1898
Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...
CVE-2006-1898: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...
Tiny PHP forum - vulns
Summery : ------------------------------ Name : Tiny PHP forum v3.6 Software : http://sourceforge.net/projects/tinyphpforum/ Discovered by : Hessam-x Hessam M.Salehi - www.hessamx.net Vulnerabilities : ------------------------------ I. Cross-site Scripting A.Input code to the "uname" in profile.p...