CVE-2007-3697: Undefined Security Weakness

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbbrootpath parameter...

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion !/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; pri...

CVE-2006-7208

CVE-2006-7208 is a PHP remote file inclusion vulnerability in the Mambo-based phpBB component (com_forum) used by Adam van Dongen Forum, affecting version 1.2.4RC3 and earlier. The root cause is inadequate sanitization of the phpbb_root_path parameter in download.php (and related scripts), allowi...

CVE-2006-7208: Improper Input Validation

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum comforum component aka phpBB component 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlenewsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit/title script language="JavaScript"...

NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= NewsSync for phpBB 1.5.0rc6 Remote File Inclusion Exploit ========================================================= newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page : http://www.coolerclimate.com/downloads/newssync1.5.0rc6.t...

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion

NewsSync for phpBB 1.5.0rc6 - Remote File Inclusion newsSync 1.5.0rc6 nukeinclude.php Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: newsSync 1.5.0rc6 //'Author : GoLdM = Mahmoodali //'S.Page :...

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

Sql injection

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

CVE-2007-2858

CVE-2007-2858 describes an SQL injection in the IP-Search function of the IP-Tracking Mod for phpBB 2.0.x. The vulnerability allows remote authenticated administrators to execute arbitrary SQL commands through the Search Query field. The provided documents confirm the affected software/module and...

CVE-2007-2858

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

CVE-2007-2858: Undefined Security Weakness

SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators to execute arbitrary SQL commands via the Search Query field...

MXBB MX Smartor Module PHPBB_Root_Path远程文件包含漏洞

mxBB Smartor Album module是一款基于PHP的WEB应用程序。 mxBB Smartor Album module不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'adminalbumotf.php'脚本对用户提交的'PHPBBRootPath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 mxBB Smartor Album module 2.0 RC1 目前没有解决方案提供： http://www.mx-system.com/...

eclipse-rfi.txt

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested Successfully on 0.5.0 "Lite" and other version should be infected : / Script Informations MOD Title: EclipseBB M...

extreme-rfi.txt

Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 3.0 Pre Final And other Versions Should be infected / Script info Mod Title: Extreme PHPBB 3.0 Mod Version: 3.0 Pre Final Author: danb00 Demo:...

EclipseBB Remote File Inclusion

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested Successfully on 0.5.0 "Lite" and other version should be infected : / Script Informations MOD Title: EclipseBB M...

Extreme PHPBB2 Remote File Inclusion

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 3.0 Pre Final And other Versions Should be infected / Script info Mod Title: Extreme PHPBB 3.0 Mod Version: 3...

PHPBB Mutant Mutant_Functions.PHP远程文件包含漏洞

PHPBB Mutant是一款基于PHP的WEB应用程序。 PHPBB Mutant不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'MutantFunctions.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mutant Mutant 0.9.2 Mutant Mutant 0.9.1 目前没有解决方案提供： http://sourceforge.net/projects/phpbb22-mutant/...

CVE-2007-1961

PHP remote file inclusion vulnerability in mutantfunctions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...