phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln

Exploit for unknown platform in category web applications ============================================================= phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln ============================================================= /...

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages / -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

/ -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On http://www.phpbbhacks.com/load.php?id=1595 NOTE: Works...

phpBB v1.4.2 远程用户修改SQL查询缺陷

phpBB v1.4.2及以前版本存在一个缺陷，远程用户可能修改SQL查询串。 该问题出在“bbmemberlist.php”中，问题代码如下：switch$sortby case '': ... case 'posts': ... $sql = SELECT FROM users WHERE ... ORDER BY $sortby ;如果用户提交的“$sortby”变量不在这些值中的话，就会被直接插入SQL查询串中，这 可能存在一些潜在的安全隐患。 v1.4.2及以前版本 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商 的主页以获取最新版本：...

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...

CVE-2008-4125: Exposure of Sensitive Information to an Unauthorized Actor

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID e3cf89f0-53da-11d9-92b7-ceadd4ac2edd OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID 4afacca1-eb9d-11d9-a8bd-000cf18bbe54 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID 03653079-8594-11d9-afa0-003048705d5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...