CVE-2007-3935

CVE-2007-3935 affects the SupaNav 1.0.0 module for phpBB, where a remote file inclusion flaw in link_main.php allows an attacker to execute arbitrary PHP code by passing a crafted URL in the phpbb_root_path parameter. Documented impact is remote code execution with high severity (CVSS v2 base sco...

phpbbsupanav-rfi.txt

phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contact: bd0rkathackermail.com ICQ:...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

No description provided by source. phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contac...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php RFI Vulnerability ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusi...

phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion

phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contact: bd0rkathackermail.com ICQ:...

phpBB Module SupaNav 1.0.0 - link_main.php Remote File Inclusion

phpBB Module SupaNav 1.0.0 - linkmain.php Remote File Inclusion phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2:...

mkportal-sql.txt

?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

No description provided by source. ?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stabl...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...

MKPortal 1.1.1 reviews / Gallery modules - SQL Injection

?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...

CVE-2007-3697

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbbrootpath parameter...

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion !/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; pri...

CVE-2006-7208

CVE-2006-7208 is a PHP remote file inclusion vulnerability in the Mambo-based phpBB component (com_forum) used by Adam van Dongen Forum, affecting version 1.2.4RC3 and earlier. The root cause is inadequate sanitization of the phpbb_root_path parameter in download.php (and related scripts), allowi...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlenewsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit/title script language="JavaScript"...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit ========================================================= newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page : http://www.coolerclimate.com/downloads/newssync1.5.0rc6.t...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page :...

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

Sql injection

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

CVE-2007-2858

CVE-2007-2858 describes an SQL injection in the IP-Search function of the IP-Tracking Mod for phpBB 2.0.x. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands through the Search Query field. The provided documents confirm the affected software/module and...