Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

+===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...

Virtual Path PHPBB模块configure.php远程文件包含漏洞

Virtual Path是一款基于PHP的WEB应用程序。 Virtual Path不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Configure.PHP'脚本对用户提交的'phpbbrootpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Virtual Path 1.0 目前没有解决方案提供： http://sourceforge.net/project/showfiles.php?groupid=143240...

Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

No description provided by source. +===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...

Virtual Path 1.0 - vpconfigure.php Remote File Inclusion

Virtual Path 1.0 - vpconfigure.php Remote File Inclusion +===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...

Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Virtual Path 1.0 vp/configure.php Remote File Include Vulnerability =====================================================================...

Virtual Path 1.0 - '/vp/configure.php' Remote File Inclusion

+===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...

phpBB 2.0.21 - privmsg.php HTML Injection

phpBB 2.0.21 - privmsg.php HTML Injection source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...

phpBB 2.0.21 - 'privmsg.php' HTML Injection

source: https://www.securityfocus.com/bid/22001/info phpBB is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute in the context of th...

phpBB (privmsg.php) XSS Exploit

phpBB privmsg.php XSS Exploit By: Demential Web: http://headburn.altervista.org E-mail: [email protected] PhpBB website: http://phpbb.com Exploit tested on phpBB 2.0.21 Secunia.com said: Input passed to the form field "Message body" in privmsg.php is not properly sanitised before it is returned to...

MKPortal Full Path Disclosure

MkPortal Full Path Disclosure Vulnerability discovered by: Demential Web: http://headburn.altervista.org E-mail: infoatburnheaddotit Mkportal website: http://www.mkportal.it Tested on MKPortal M1.1 RC1 with PhpBB other versions may also be affected. http://www.victim.com/mkportal/admin.php?MKPATH...

CVE-2006-6840

CVE-2006-6840 affects phpBB up to version 2.0.22 (and some older distributions) where a negative start parameter could lead to invalid output. The available connected sources confirm this as a remote web-app vulnerability in phpBB’s 2.0.x line with limited, unspecified impact and unknown exploita...

CVE-2006-6841

Affected product: phpBB (2.x). The issue CVE-2006-6841 arises from forms not performing session checks, enabling CSRF-like actions by an attacker on behalf of a logged-in user. Descriptions consistently indicate unknown impact in the original note, and multiple advisories/OSS records align on thi...

CVE-2006-6839

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."...

CVE-2006-6841

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6839

CVE-2006-6839 affects phpBB before 2.0.22. The issue is described as an unspecified vulnerability with unknown impact and remote attack vectors related to redirection targets not being properly validated. CVSS base score listed as 10.0 (high impact). Debian/DSA-1488-1 indicates fixes: etch (stabl...

phpBB < 2.0.22 Multiple Vulnerabilities

The version of phpBB installed on the remote host fails to properly block 'bad' redirection targets. In addition, it reportedly contains a non-persistent cross-site scripting flaw involving its private messaging functionality and several other issues. At a minimum, a remote attacker can leverage...

CVE-2006-6841

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...