2186 matches found
phpBB 'ucp.php' XSS Vulnerability
According to its version number, the remote version of phpbb is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. UPDATE March 13, 2009: The referenced BID is being retired because the issue cannot be exploited as described...
phpBB Forum Detection (HTTP)
HTTP based detection of phpBB. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100033";...
PHPBB 2.0.22 XSRF Exploit
Author: Dante90, WaRWolFz Crew Title: Exploit PhpBB = 2.0.22 Add User In A Group SWF Version By Dante90 0-Day Proof Of Concept: PhpBB 2.0.22 = CSRF Add user In Group By Vincy Change: ByPass HTTPREFERER Protection. MSN: [email protected] Web: www.warwolfz.org Exploit PhpBB = 2.0.22 Add User ...
CVE-2008-6377
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...
CVE-2008-6377
CVE-2008-6377 is a PHP remote file inclusion vulnerability in Multi SEO phpBB 1.1.0. The flaw exists in include/global.php and allows a remote attacker to execute arbitrary PHP code by supplying a URL in the pfad parameter, leading to potential compromise of the affected system. Affected product/...
Sql injection
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6314
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6314
CVE-2008-6314 describes a SQL injection in the Tag Board module for phpBB (version 4.0 and earlier), in the file tag_board.php. The vulnerability is exploitable via the id parameter in a delete action, enabling remote attackers to execute arbitrary SQL commands. The provided documents confirm the...
CVE-2008-6301
SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
Sql injection
SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6301
CVE-2008-6301 : A SQL injection vulnerability affects the Small ShoutBox module 1.4 for phpBB via the id parameter in the delete action in shoutbox_view.php. Remote attackers could potentially execute arbitrary SQL commands. The connected documents provide explicit details of affected software an...
CVE-2008-6301
SQL injection vulnerability in shoutboxview.php in the Small ShoutBox module 1.4 for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability
No description provided by source. phpBB 3 autopost bot mod = 0.1.3 Remote File Include Vulnerability Vulnerability author: Kacper Greetz: all DEVIL TEAM forum members. Author Website: http://devilteam.pl/ http://polskihacking.pl/ Mod Description: This mod automatically post content from RSS feed...
phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // d...
phpBB 3 Remote File Inclusion
phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have some feeds in database to check $s...
phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion
phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have som...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit http://bx67212.netsons.org/forum/viewforum.php?f=3...
phpBB 3 / Mod Tag Board 4 Blind SQL Injection
!/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board get$host.injection$i,$chars$j; $time2 = time; if$time2 - $time1 6 syswriteSTDOUT,chr$chars$j; $hash .= chr$chars$j; last; if$i == 1 && length $...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit =============================================================== !/usr/bin/perl...