33 matches found
EUVD-2005-4524
Malware in sbrugna...
EUVD-2006-1775
Malware in sbrugna...
EUVD-2008-1766
Malware in sbrugna...
EUVD-2010-1650
Malware in sbrugna...
EUVD-2002-2324
Malware in sbrugna...
EUVD-2005-1293
Malware in sbrugna...
Debian Security Advisory DSA 1488-1 (phpbb2)
The remote host is missing an update to phpbb2 announced via advisory DSA 1488-1. OpenVAS Vulnerability Test $Id: deb14881.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1488-1 phpbb2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
phpBB 2.0.15 - Register Multiple Users (Denial of Service) (C)
phpBB 2.0.15 - Register Multiple Users Denial of Service C / -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions:...
-==phpBB 2.0.14 Multiple Vulnerabilities==-
/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...
phpBB <= 2.0.13 Multiple Vulnerabilities
According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A Path Disclosure Vulnerability A remote attacker can cause phpBB to reveal its installation path via a direct request to the script 'db/oracle.php'. - A Cross-Site Scripting Vulnerability T...
phpBB < 2.0.14 Cookie Authentication Bypass and SQL Injection Vulnerabilities
Binary data 2674.prm...
GLSA-200503-02 : phpBB: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200503-02 phpBB: Multiple vulnerabilities It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the...
phpBB: Multiple vulnerabilities
Background phpBB is an Open Source bulletin board package. Description It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the "Enable remote avatars" and "Enable avata...
phpBB <= 2.0.12 Multiple Vulnerabilities
The remote host is running a version of phpBB that suffers from a session handling flaw allowing a remote attacker to gain access to any account, including that of an administrator. Also, there is a path disclosure bug in 'viewtopic.php' that can be exploited by a remote attacker to reveal...
phpBB <= 2.0.11 Multiple Vulnerabilities
The remote host is running phpBB version 2.0.11 or older. Such versions suffer from multiple vulnerabilities: - full path display on critical messages. - full path disclosure in username handling caused by a PHP 4.3.10 bug. - arbitrary file disclosure vulnerability in avatar handling functions. -...
phpbb -- multiple vulnerabilities
phpBB is vulnerable to remote exploitation of an input validation vulnerability allows attackers to read the contents of arbitrary system files under the privileges of the webserver. This also allows remote attackers to unlink arbitrary system files under the privileges of the webserver...
[SA14362] phpBB Avatar Functions Information Disclosure and Deletion
TITLE: phpBB Avatar Functions Information Disclosure and Deletion SECUNIA ADVISORY ID: SA14362 VERIFY ADVISORY: http://secunia.com/advisories/14362/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: phpBB 2.x...
phpBB < 2.0.11 Multiple Vulnerabilities (ESMARKCONANT)
The remote host is running a version of phpBB older than 2.0.11. It is reported that this version of phpBB is susceptible to a script injection vulnerability which may allow an attacker to execute arbitrary code on the remote host. In addition, phpBB has been reported to multiple SQL injections,...
phpBB 2.0.10 - ssh.D.Worm Bot Install Altavista
phpBB 2.0.10 - ssh.D.Worm Bot Install Altavista !/usr/bin/perl ------------------------------------------------------------------------ Severino Honorato - /server irc.priv8crew.info Priv8crew - ssh.D.Worm use IO::Socket; use LWP::Simple; my $processo = "/usr/local/apache/bin/httpd -DSSL";...
CVE-2004-2130
Multiple cross-site scripting XSS vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the 1 folder or 2 mode variables...