2446 matches found
CVE-2006-3940
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via 1 the ar parameter in auctionroom.php and 2 the u parameter in auctionstore.php. NOTE: the auctionrating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosu...
CVE-2006-3940
CVE-2006-3940 concerns multiple SQL injection vulnerabilities in the phpbb-Auction package. The affected components, as described in the provided documents, allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) ar in auction_room.php and (2) u in auction_store...
CVE-2006-3940: Undefined Security Weakness
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via 1 the ar parameter in auctionroom.php and 2 the u parameter in auctionstore.php. NOTE: the auctionrating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosu...
phpBB-Auction 1.x - auction_store.php?u SQL Injection
phpBB-Auction 1.x - auctionstore.php?u SQL Injection source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities...
phpBB-Auction 1.x - auction_room.php?ar SQL Injection
phpBB-Auction 1.x - auctionroom.php?ar SQL Injection source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities...
phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection
source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote attackers to pass malicious input...
phpBB-Auction 1.x - 'auction_store.php?u' SQL Injection
source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote attackers to pass malicious input...
[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities
MajorSecurity 25 Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities ---------------------------------------------------------------------------------------- Software: Advanced Guestbook for phpBB Version: 2.4 Type: Cross site scripting + SQL Injection Made public:...
XSS phpBB 2.0.21 in administration
phpBB 2.0.21 XSS in administration //-- By Blwood [email protected] //-- http://www.blwood.net //-- Style Admin ----------- Management & Create a theme Lots of input are not properly "filtrate" like stylename, headstylesheet, bodybackground, trcolor1name all the input in simple name... We cand...
mail2forum12.txt
------=Part289281151264.1153174544672 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline mail2forum mail2forum Discovered By OLiBekaS Affected software description : Application : mail for phpbb bulletin board/forum...
CVE-2006-3735
Multiple PHP remote file inclusion vulnerabilities in Mail2Forum module for phpBB 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2frootpath parameter to 1 m2f/m2fphpbb204.php, 2 m2f/m2fforum.php, 3 m2f/m2fmailinglist.php or 4 m2f/m2fcron.php...
CVE-2006-3735: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Mail2Forum module for phpBB 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2frootpath parameter to 1 m2f/m2fphpbb204.php, 2 m2f/m2fforum.php, 3 m2f/m2fmailinglist.php or 4 m2f/m2fcron.php...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
No description provided by source. Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software...
mail2forum phpBB Mod 1.2 - m2f_root_path Remote File Inclusion
mail2forum phpBB Mod 1.2 - m2frootpath Remote File Inclusion Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
Exploit for unknown platform in category web applications ================================================================ mail2forum phpBB Mod = 1.2 m2frootpath Remote Include Vulns ================================================================ Title : mail2forum = 1.2 Multiple Remote File...
mail2forum phpBB Mod 1.2 - 'm2f_root_path' Remote File Inclusion
Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software version : latest version 1.2 URL :...
phpBB 3 (memberlist.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered by phpBB...
phpBB 3 - memberlist.php SQL Injection
phpBB 3 - memberlist.php SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$s...
phpBB 3 (memberlist.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== phpBB 3 memberlist.php Remote SQL Injection Exploit ===================================================== !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argumen...