phpBB Links MOD 1.2.2 - SQL Injection

!/usr/bin/perl print q phpBB Insert URL = without http = ; $server = ; chop $server; print q = Insert directory = es: /forum/ - /phpBB2/ = ; $dir = ; chop $dir; print q = User ID = Number: = ; $user = ; chop $user; if !$ARGV2 $myuser = $ARGV3; $mypass = $ARGV4; $myid = $ARGV5; $server =...

phpBB SupaNav模块远程文件包含漏洞

BUGTRAQ ID: 24964 phpBB是非常流行的WEB论坛程序。 phpBB的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpBB的linkmain.php脚本中没有正确地验证对phpbbrootpath参数的输入，允许攻击者通过包含任意本地或外部资源导致执行任意代码。有漏洞的代码如下： require$phpbbrootpath.'language/lang'.$userdata'userlang'.'/langnav.'.$phpEx; phpBB Group Mod SupaNav 1.0.0 phpBB Group...

Remote file inclusion

PHP remote file inclusion vulnerability in linkmain.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-3935

CVE-2007-3935 affects the SupaNav 1.0.0 module for phpBB, where a remote file inclusion flaw in link_main.php allows an attacker to execute arbitrary PHP code by passing a crafted URL in the phpbb_root_path parameter. Documented impact is remote code execution with high severity (CVSS v2 base sco...

phpbbsupanav-rfi.txt

phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contact: bd0rkathackermail.com ICQ:...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

No description provided by source. phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contac...

phpBB Module SupaNav 1.0.0 - link_main.php Remote File Inclusion

phpBB Module SupaNav 1.0.0 - linkmain.php Remote File Inclusion phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2:...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php RFI Vulnerability ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusi...

phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion

phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contact: bd0rkathackermail.com ICQ:...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

No description provided by source. ?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stabl...

mkportal-sql.txt

?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...

MkPortal <= 1.1.1 reviews / gallery modules SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= MkPortal = 1.1.1 reviews / gallery modules SQL Injection Exploit ================================================================= ?php / i MkPortal "reviews" and "gallery"...

MKPortal 1.1.1 reviews / Gallery modules - SQL Injection

?php / i MkPortal "reviews" and "gallery" modules SQL Injection Exploit i Vulnerable versions: MkPortal = 1.1.1 i Bug discovered by: Coloss i Exploit by: Coloss i Date: 06.07.2007 i This is priv8 not for kids Notes At this time MkPortal 1.1.1 is the latest stable release Currently implemented:...

CVE-2007-3697

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbbrootpath parameter...

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion !/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; pri...

CVE-2006-7208

CVE-2006-7208 is a PHP remote file inclusion vulnerability in the Mambo-based phpBB component (com_forum) used by Adam van Dongen Forum, affecting version 1.2.4RC3 and earlier. The root cause is inadequate sanitization of the phpbb_root_path parameter in download.php (and related scripts), allowi...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlenewsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit/title script language="JavaScript"...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit ========================================================= newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page :...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page : http://www.coolerclimate.com/downloads/newssync1.5.0rc6.t...