2446 matches found
[SA21787] Attachment Mod Attachment Script Insertion Vulnerability
TITLE: Attachment Mod Attachment Script Insertion Vulnerability SECUNIA ADVISORY ID: SA21787 VERIFY ADVISORY: http://secunia.com/advisories/21787/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Attachment Mod 2.x module for phpBB http://secunia.com/product/4371/...
phpBB Shadow Premod <= 2.7.1 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== phpBB Shadow Premod = 2.7.1 Remote File Include Vulnerability ==============================================================...
phpBB Shadow Premod <= 2.7.1 Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- Shadow Prémod = 2.7.1 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security...
phpBB Shadow Premod 2.7.1 - Remote File Inclusion
phpBB Shadow Premod 2.7.1 - Remote File Inclusion --------------------------------------------------------------------------- Shadow Prémod = 2.7.1 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn...
CVE-2006-4450
usercpavatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request...
CVE-2006-4450
usercpavatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request...
CVE-2006-4450
CVE-2006-4450 affects PHPBB 2.0.20 when avatar uploading is enabled: the usercp_avatar.php avatarurl parameter is used to fetch a URL via HTTP GET, enabling an attacker to co-opt the server as a web proxy. The public description specifies the exploit path and impact as a proxy-like use, with CVSS...
CVE-2006-4450: Undefined Security Weakness
usercpavatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request...
CVE-2006-4367
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2006-4367
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...
CVE-2006-4367
The CVE-2006-4367 issue affects phpBB 2.0.21 with the All Topics Hack 1.5.0 and earlier, where alltopics.php is vulnerable to SQL injection via the start parameter. The underlying cause is an insecure handling of the start input, enabling an attacker to manipulate SQL execution remotely. Public r...
CVE-2006-4367: Undefined Security Weakness
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...
phpBB All Topics Mod <= 1.5.0 (start) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== phpBB All Topics Mod Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID =...
phpBB All Topics Mod <= 1.5.0 (start) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | | | \ \ / / '..' Author: SpiderZ Exploit: All Topics Hack Sql injection For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org...
phpBB All Topics Mod 1.5.0 - start SQL Injection
phpBB All Topics Mod 1.5.0 - start SQL Injection !/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID =...
phpBB All Topics Mod 1.5.0 - 'start' SQL Injection
!/usr/bin/perl print q / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ ForumZ Security | | Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description :...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== WoW Roster = 1.70 /lib/phpbb.php Remote File Include Vulnerability =====================================================================...
WoW Roster 1.70 - '/lib/phpBB.php' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description : Application : World of Warcraft WoW...
CVE-2006-3940
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via 1 the ar parameter in auctionroom.php and 2 the u parameter in auctionstore.php. NOTE: the auctionrating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosu...