2184 matches found
phpBB 2.0.15 (highlight) Database Authentication Details Exploit
No description provided by source. !/usr/bin/perl tested and working /str0ke...
phpBB 2.0.15 (highlight) Database Authentication Details Exploit
Exploit for unknown platform in category web applications ================================================================ phpBB 2.0.15 highlight Database Authentication Details Exploit ================================================================ !/usr/bin/perl tested and working /str0ke...
phpBB 2.0.15 - 'highlight' Database Authentication Details
!/usr/bin/perl tested and working /str0ke...
phpbb2_0_15.pl.txt
!/usr/bin/perl Wed Jun 29 19:08:04 CEST 2005 [email protected] phpBB 2.0.15 -re-bug in viewtopic.php The complete Open Source Development with CVS: GNU General Public License Book on using CVS effectively \n"; exit1; $ARGV0 = m!http://.?/.?t=\d+!; my $server, $port = split /:/,$1; $port = 80...
CVE-2005-2086
Summary of concrete details (CVE-2005-2086) : The phpBB viewtopic.php vulnerability is an arbitrary code execution flaw affecting phpBB 2.0.4 through 2.0.15 (inclusive). The root cause involves improper handling of the highlight parameter in viewtopic.php, enabling PHP code execution on vulnerabl...
[EXPL] phpBB Remote PHP Code Execution (viewtopic.php 2)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
phpBB 2.0.15 (highlight) Remote PHP Code Execution
No description provided by source. tested and working /str0ke !/usr/bin/pyth0n this exploit for phpBB 2.0.15 print "\nphpBB 2.0.15 arbitrary command execution eXploit" emulates a shell, print " 2005 by [email protected]" rather than print " well, just because there is none." sending a singl...
phpBB 2.0.15 - highlight PHP Remote Code Execution
phpBB 2.0.15 - highlight PHP Remote Code Execution tested and working /str0ke !/usr/bin/pyth0n this exploit for phpBB 2.0.15 print "\nphpBB 2.0.15 arbitrary command execution eXploit" emulates a shell, print " 2005 by [email protected]" rather than print " well, just because there is none."...
phpBB 2.0.15 (highlight) Remote PHP Code Execution
Exploit for unknown platform in category web applications ================================================== phpBB 2.0.15 highlight Remote PHP Code Execution ================================================== tested and working /str0ke !/usr/bin/pyth0n this exploit for phpBB 2.0.15 print "\nphpBB...
phpBB < 2.0.16 viewtopic.php Arbitrary Code Execution
Binary data 3038.prm...
phpBB 2.0.15 - 'highlight' PHP Remote Code Execution
tested and working /str0ke !/usr/bin/pyth0n this exploit for phpBB 2.0.15 print "\nphpBB 2.0.15 arbitrary command execution eXploit" emulates a shell, print " 2005 by [email protected]" rather than print " well, just because there is none." sending a single command. import sys from urllib2...
Security Advisory - phpBB 2.0.15 PHP-code injection bug
Security Advisory -//- phpBB 2.0.15 PHP-code injection bug Program: phpBB 2.0.15 and older versions Homepage: http://www.phpbb.com Risk: Very High Date: June 28 2005 Title: PHP-code injection bug Type: partial disclosure Author: Ron van Daal :. Vendor notified: June 23 2005 Background: phpBB is a...
Re: [Full-disclosure] Security Advisory - phpBB 2.0.15 PHP-code injection bug
On 28 Jun ‘05, at 14:47, ronvdaal wrote: Proof of concept: http://some.forum/viewtopic.php?p=postnum&highlight='.dieomghax.' Uh, whoops. Another suggested solution: Remove the highlight handling code in viewtopic.php or replace it with something that does not use the /e flag to pregreplace. As it...
phpBB < 2.0.16 viewtopic.php Highlighting Feature Arbitrary PHP Code Execution
The remote host is running a version of phpBB that allows attackers to inject arbitrary PHP code to the 'viewtopic.php' script to be executed subject to the privileges of the web server userid. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
CVE-2002-1894
CVE-2002-1894 describes a Cross-site scripting (XSS) vulnerability in phpBB 2.0.3, where the highlight parameter in viewtopic.php can be exploited to inject arbitrary script/HTML. Affected component: phpBB 2.0.3, file viewtopic.php. Root cause: insufficient input handling allowing script/HTML inj...
CVE-2002-1894
Cross-site scripting XSS vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...
phpBB 2.0.16 released
Hi everyone, phpBB Group announces the release of phpBB 2.0.16. This release addresses some bugfixes and one critical security issue. To fix this, please apply the following change: In viewtopic.php Find: $message = strreplace'"', '"', substr@pregreplace'?^+|?Rse', "@pregreplace'b" . strreplace''...
phpbb -- remote PHP code execution vulnerability
FrSIRT Advisory reports: A vulnerability was identified in phpBB, which may be exploited by attackers to compromise a vulnerable web server. This flaw is due to an input validation error in the "viewtopic.php" script that does not properly filter the "highlight" parameter before calling the...
NsT-phpBBDoS.pl.txt
!/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS Flooder. g30rg3x@neosecurity:/home/g30rg3x perl NsT-phpBBDoS.pl...
[EXPL] phpBB Multiple User Registeration DoS (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...