Lucene search
K

2176 matches found

seebug.org
seebug.org
added 2008/11/06 12:0 a.m.28 views

phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln

No description provided by source. / -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2008/11/05 12:0 a.m.31 views

phpBB Mod Small ShoutBox 1.4 - Remote Edit/Delete Messages

/ -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On http://www.phpbbhacks.com/load.php?id=1595 NOTE: Works...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2008/11/05 12:0 a.m.13 views

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages

phpBB Mod Small ShoutBox 1.4 - Remote EditDelete Messages / -------------------------------------------------------------- phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln -------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

0.3AI score
Exploits0
0day.today
0day.today
added 2008/11/05 12:0 a.m.14 views

phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln

Exploit for unknown platform in category web applications ============================================================= phpBB Mod Small ShoutBox 1.4 Remote Edit/Delete Messages Vuln ============================================================= /...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2008/10/25 12:0 a.m.20 views

phpBB v1.4.2 远程用户修改SQL查询缺陷

phpBB v1.4.2及以前版本存在一个缺陷,远程用户可能修改SQL查询串。 该问题出在“bbmemberlist.php”中,问题代码如下:switch$sortby case '': ... case 'posts': ... $sql = SELECT FROM users WHERE ... ORDER BY $sortby ;如果用户提交的“$sortby”变量不在这些值中的话,就会被直接插入SQL查询串中,这 可能存在一些潜在的安全隐患。 v1.4.2及以前版本 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商 的主页以获取最新版本:...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.11 views

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.18 views

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

0.8AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.18 views

Gentoo Security Advisory GLSA 200507-03 (phpBB)

The remote host is missing updates announced in advisory GLSA 200507-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.86512EPSS
Exploits9References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.15 views

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4CVSS6.7AI score0.00539EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.20 views

Gentoo Security Advisory GLSA 200503-02 (phpbb)

The remote host is missing updates announced in advisory GLSA 200503-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

6.4CVSS0.1AI score0.00539EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.43 views

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.85909EPSS
Exploits11References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.6 views

Gentoo Security Advisory GLSA 200505-10 (phpBB)

The remote host is missing updates announced in advisory GLSA 200505-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References4
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.34 views

Gentoo Security Advisory GLSA 200411-32 (phpBB)

The remote host is missing updates announced in advisory GLSA 200411-32. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

7.5CVSS0.5AI score0.85909EPSS
Exploits11
NVD
NVD
added 2008/09/18 5:59 p.m.8 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

5CVSS6.3AI score0.00221EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2008/09/18 5:59 p.m.19 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

5CVSS5.9AI score0.00221EPSS
Exploits0References1
CVE
CVE
added 2008/09/18 5:47 p.m.39 views

CVE-2008-4125

The CVE-2008-4125 entry fixes a PHP/phpBB 2.x issue where the search_id value leaks PHP’s PRNG state, enabling remote disclosure of potentially sensitive information. The vulnerability is demonstrated via a cross-application attack against WordPress; no explicit exploit details or remediation are...

5CVSS6.3AI score0.00221EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2008/09/18 5:47 p.m.12 views

CVE-2008-4125

The search function in phpBB 2.x provides a searchid value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632...

6.2AI score0.00221EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.15 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID 4a0b334d-8d8d-11d9-afa0-003048705d5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

4.3CVSS6.7AI score0.00335EPSS
Exploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.9 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. VID a56a72bb-9f72-11d8-9585-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2008/09/04 12:0 a.m.9 views

FreeBSD Ports: phpbb

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5CVSS7.2AI score0.00619EPSS
Exploits1References2
Rows per page
Query Builder