36 matches found
EUVD-2006-4880
Malware in sbrugna...
EUVD-2006-5079
Malware in sbrugna...
EUVD-2007-5014
Malware in sbrugna...
PhpBB XS 0.58 Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20277/info phpBB XS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and...
phpBB XS <= 0.58 (functions.php) Remote File Include Vulnerability
No description provided by source. Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
phpbbxsmod-lfi.txt
..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...
Cross site scripting
Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...
CVE-2007-5033
Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...
CVE-2007-5033
The provided data confirms CVE-2007-5033 is an XSS vulnerability in profile.php of phpBB XS 2. The flaw allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profile_info editprofile action. Affected component: profile.php in phpBB XS 2; root cause: insuffi...
CVE-2007-5033
Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...
phpbb-permxss.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...
phpBB XS bb_usage_stats.php远程文件包含漏洞
phpBB XS是一款基于PHP的论坛程序。 phpBB XS在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpBB XS的bbusagestats/includes/bbusagestats.php脚本没有正确验证phpbbrootpath参数的输入数据，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。bbusagestats.php中漏洞代码如下： line 24 include$phpbbrootpath...
phpBBXS2.txt
SolpotCrew Community phpBB XS 2 spain version phpbbrootpath Remote File Inclusion Download : http://www.elanzuelo.es/phpbb.tar.gz Bug Found By :Solpot a.k.a k. Hasibuan 28-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt Greetz: choi , h4ntu ,...
phpBBXS-0.58.txt
phpBB XS = 0.58 phpbbrootpath Remote File Include Vulnerability2 Author: XORON - SHiKaA URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang' . '/langbbcbmg.' . $phpEx; Exploit:...
phpBB XS <= 0.58 (phpbb_root_path) Remote File Include Vulnerability(2)
phpBB XS = 0.58 phpbbrootpath Remote File Include Vulnerability2 Author: XORON - SHiKaA URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang' . '/langbbcbmg.' . $phpEx; Exploit:...
phpBB XS 0.58 - Multiple Remote File Inclusions
phpBB XS 0.58 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20277/info phpBB XS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...
CVE-2006-5094
PHP remote file inclusion vulnerability in includes/functionskb.php in the phpBB XS 2 Spain version allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780 or CVE-2006-4893...
CVE-2006-5094
PHP remote file inclusion vulnerability in includes/functionskb.php in the phpBB XS 2 Spain version allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780 or CVE-2006-4893...
CVE-2006-5094
CVE-2006-5094 applies to phpBB XS 2 (Spain version) with a PHP remote file inclusion in includes/functions_kb.php. The vulnerability allows a remote attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. This is a network vector affecting phpBB XS 2 (Spain); t...
PT-2006-5832 · Phpbb Xs · Phpbb Xs
PHP remote file inclusion vulnerability in includes/functions kb.php in the phpBB XS 2 Spain version allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893...