2184 matches found
phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection
source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote attackers to pass malicious input...
[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities
MajorSecurity 25 Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities ---------------------------------------------------------------------------------------- Software: Advanced Guestbook for phpBB Version: 2.4 Type: Cross site scripting + SQL Injection Made public:...
XSS phpBB 2.0.21 in administration
phpBB 2.0.21 XSS in administration //-- By Blwood [email protected] //-- http://www.blwood.net //-- Style Admin ----------- Management & Create a theme Lots of input are not properly "filtrate" like stylename, headstylesheet, bodybackground, trcolor1name all the input in simple name... We cand...
mail2forum12.txt
------=Part289281151264.1153174544672 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline mail2forum mail2forum Discovered By OLiBekaS Affected software description : Application : mail for phpbb bulletin board/forum...
CVE-2006-3735
Multiple PHP remote file inclusion vulnerabilities in Mail2Forum module for phpBB 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the m2frootpath parameter to 1 m2f/m2fphpbb204.php, 2 m2f/m2fforum.php, 3 m2f/m2fmailinglist.php or 4 m2f/m2fcron.php...
mail2forum phpBB Mod 1.2 - 'm2f_root_path' Remote File Inclusion
Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software version : latest version 1.2 URL :...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
Exploit for unknown platform in category web applications ================================================================ mail2forum phpBB Mod = 1.2 m2frootpath Remote Include Vulns ================================================================ Title : mail2forum = 1.2 Multiple Remote File...
mail2forum phpBB Mod 1.2 - m2f_root_path Remote File Inclusion
mail2forum phpBB Mod 1.2 - m2frootpath Remote File Inclusion Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
No description provided by source. Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software...
phpBB 3 (memberlist.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered by phpBB...
phpBB 3 (memberlist.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== phpBB 3 memberlist.php Remote SQL Injection Exploit ===================================================== !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argumen...
phpBB 3 - memberlist.php SQL Injection
phpBB 3 - memberlist.php SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$s...
phpBB 3 - 'memberlist.php' SQL Injection
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$s...
Mambo phpBB Component download.php phpbb_root_path Parameter Remote File Inclusion
The remote host is running the phpBB component for Mambo, a web-based bulletin board. The version of the phpBB component for Mambo installed on the remote host fails to sanitize input to the 'phpbbrootpath' parameter of the 'download.php' and other scripts before using it to include PHP code...
Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions
Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ca...
Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...
phpBB 2.0.21 Full Path Disclosure
------------------------------------------------------------------- phpBB 2.0.21 Full Path Disclosure ------------------------------------------------------------------- Discovered By zero Moroccan Security Team ------------------------------------------------------------------- Details Software:...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
CVE-2006-3257
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...
THoRCMS 1.3.1 - phpbb_root_path Remote File Inclusion
THoRCMS 1.3.1 - phpbbrootpath Remote File Inclusion --------------------------------------------------------------------------- THoRCMS = 1.3.1 phpbbrootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romani...