CVE-2007-1555

CVE-2007-1555 is a SQL injection vulnerability reported in the Minerva mod 2.0.21 build 238a and earlier for phpBB, exploitable via the c parameter in forum.php. The affected component is the forum.php entry point within the Minerva mod for phpBB; the root cause is an SQL injection that allows re...

CVE-2007-1555

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter...

minerva-sql.txt

======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

phpbb2. 0. 1 2 full path disclosure vulnerability-a vulnerability warning-the black bar safety net

phpbb is a powerful, scalable open source electronic Bulletin system. The latest version and low version are there is a path disclosure issue. Test method: The forum path is/viewtopic. php? p=6&highlight=\xiaohua Will appear the following text: Warning: Compilation failed: missing terminating for...

phpBB Minerva Mod 2.0.21 build 238a - SQL Injection

======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

phpBB Minerva Mod <= 2.0.21 build 238a SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpBB Minerva Mod = 2.0.21 build 238a SQL Injection Vulnerability ==================================================================...

phpBB Minerva Mod 2.0.21 build 238a - SQL Injection

phpBB Minerva Mod 2.0.21 build 238a - SQL Injection ======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

CVE-2006-7147

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-7148

PHP remote file inclusion vulnerability in includes/bbusagestats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbbrootpath parameter. NOTE: this might be the same issues as CVE-2006-4893...

CVE-2006-7147

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-7148

Technical details for CVE-2006-7148 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-7147

CVE-2006-7147 affects the phpBB Import Tools Mod 0.1.4 and earlier. The vulnerability is a PHP remote file inclusion via the phpbb_root_path parameter, allowing remote attackers to execute arbitrary PHP code. The root cause is insufficient sanitization of the phpbb_root_path input, enabling inclu...

CVE-2006-7100

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-7100

CVE-2006-7100 is a PHP remote file inclusion vulnerability in the phpBB Insert User extension (version 0.1.2 and earlier). The flaw resides in includes/functions_mod_user.php and allows remote attackers to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. Affected pr...

CVE-2006-7100

PHP remote file inclusion vulnerability in includes/functionsmoduser.php in phpBB Insert User 0.1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-7076

Cross-site scripting XSS vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary web script or HTML via the entry parameter. NOTE: this issue might be resultant from SQL injection...

CVE-2006-7090

PHP remote file inclusion vulnerability in phpbbsecurity.php in phpBB Security 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phprootpath parameter...

CVE-2006-7077

SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter...

Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit

No description provided by source. C xoron Name: phpBB Extreme 3.0.1 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=95900 Tesekkurler: pang0, DJR POC:...

phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...