2184 matches found
SolpotCrew Advisory #14 - phpBB XS 2 spain version (phpbb_root_path) Remote File Inclusion
SolpotCrew Community phpBB XS 2 spain version phpbbrootpath Remote File Inclusion Download : http://www.elanzuelo.es/phpbb.tar.gz Bug Found By :Solpot a.k.a k. Hasibuan 28-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-10.txt Greetz: choi , h4ntu ,...
PT-2006-5832 · Phpbb Xs · Phpbb Xs
PHP remote file inclusion vulnerability in includes/functions kb.php in the phpBB XS 2 Spain version allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893...
phpBB XS 0.58a - phpbb_root_path Remote File Inclusion
phpBB XS 0.58a - phpbbrootpath Remote File Inclusion phpBB XS = 0.58 phpbbrootpath Remote File Include Vulnerability2 Author: XORON - SHiKaA URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang'...
phpBB XS <= 0.58a (phpbb_root_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== phpBB XS = 0.58a phpbbrootpath Remote File Include Vulnerability ===================================================================== phpBB XS = 0.58 phpbbrootpath Remo...
phpBB XS <= 0.58a (phpbb_root_path) Remote File Include Vulnerability
No description provided by source. phpBB XS = 0.58 phpbbrootpath Remote File Include Vulnerability2 Author: XORON - SHiKaA URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang' . '/langbbcbmg.' . $phpE...
phpBB XS 0.58a - 'phpbb_root_path' Remote File Inclusion
phpBB XS = 0.58 phpbbrootpath Remote File Include Vulnerability2 Author: XORON - SHiKaA URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang' . '/langbbcbmg.' . $phpEx; Exploit:...
CVE-2006-4893
PHP remote file inclusion vulnerability in bbusagestats/includes/bbusagestats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780...
CVE-2006-4893
PHP remote file inclusion vulnerability in bbusagestats/includes/bbusagestats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter, a different vector than CVE-2006-4780...
CVE-2006-4893
CVE-2006-4893 impacts the phpBB XS project (v0.58 and earlier). The vulnerable component is the file system access in the bb_usage_stats.php (path: bb_usage_stats/includes/bb_usage_stats.php) where a PHP remote file inclusion flaw allows an attacker to supply a URL via the phpbb_root_path paramet...
PT-2006-5647 · Phpbb · Phpbb Xs
Name of the Vulnerable Software and Affected Versions: phpBB XS versions 0.58 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. This is a different vector than previously identified issues. Recommendations: For php...
SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include
SolpotCrew Community phpBB XS phpbbrootpath Remote File Include Download file : http://www.phpbbxs.eu/dload.php?action=category&catid=2 Bug Found By : NoGe a.k.a dajackass contact: [email protected] Website : http://nyubicrew.org/adv/Nogeadv02.txt Greetz: skulmaticthanks for sharing knowledge...
Noge_adv_02.txt
SolpotCrew Community phpBB XS phpbbrootpath Remote File Include Download file : http://www.phpbbxs.eu/dload.php?action=category&catid=2 Bug Found By : NoGe a.k.a dajackass contact: [email protected] Website : http://nyubicrew.org/adv/Nogeadv02.txt Greetz: skulmaticthanks for sharing knowledge...
CVE-2006-4780
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-4780
CVE-2006-4780 affects phpBB XS 0.58 and earlier. The vulnerability is a PHP remote file inclusion in includes/functions.php that allows an attacker to execute arbitrary PHP code by supplying a crafted URL via the phpbb_root_path parameter. This is a server-side code injection impacting systems ru...
CVE-2006-4779
CVE-2006-4779 concerns a PHP remote file inclusion vulnerability in the release path for Vitrax Premodded phpBB 1.0.6-R3 and earlier. The flaw resides in the include routine, specifically in includes/functions_portal.php , where an attacker can supply a URL via the phpbb_root_path parameter to ca...
CVE-2006-4758
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...
CVE-2006-4758
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...
CVE-2006-4758
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/adminboard.php with an avatarpath parameter ending in .php%00...
CVE-2006-4758
CVE-2006-4758 affects phpBB 2.0.21 where an authenticated forum administrator can upload files by crafting the avatar_path parameter ending with .php%00. The vulnerability arises in the handling of pathnames ending in %00, enabling arbitrary file uploads. Public references in Debian OpenVAS entri...
vitrax.txt
credits: CeNGiZ-HaN contact: [email protected] team: www.system-defacers.org risk: High script: vitrax premodded phpbb script site: www.vitrax.org Exploit: http://target/path/includes/functionsportal.php?phpbbrootpath=phpshell.txt? GreeTz No One =...