CVE-2008-0471

CVE-2008-0471 concerns phpBB 2.0.22 where a CSRF flaw in privmsg.php enables an attacker to delete a user’s private messages via a crafted request (deleteall). Public sources confirm the vulnerability in phpBB2 and note remediation through Debian updates (DSA-1488-1) and corresponding fixes in si...

CVE-2008-0471

Cross-site request forgery CSRF vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages PM as arbitrary users via a deleteall action...

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code html head /head body...

phpbb2022-xsrf.txt

phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code Vuln Versions: I've tested...

Debian: Security Advisory (DSA-925-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability

No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osdata-lfi.txt

========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osData 2.08 Modules Php121 - Local File Inclusion

osData 2.08 Modules Php121 - Local File Inclusion ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro ,...

Sql injection

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

SQL injection vulnerability in garage.php in phpBB Garage 1.2.0 Beta3 allows remote attackers to execute arbitrary SQL commands via the makeid parameter in a search action in browse mode...

CVE-2007-6223

CVE-2007-6223 describes an SQL injection in garage.php of phpBB Garage 1.2.0 Beta3. The vulnerability allows remote attackers to manipulate the database by injecting SQL through the make_id parameter in a browse-mode search action, potentially impacting data confidentiality, integrity, and availa...

phpbbgarage-sql.txt

Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability

No description provided by source. Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBB Garage 1.2.0 Beta3 Remote SQL Injection Vulnerability =========================================================== Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection...

phpBB Garage 1.2.0 Beta3 - SQL Injection

phpBB Garage 1.2.0 Beta3 - SQL Injection Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB Garage 1.2.0 Beta3 - SQL Injection

Title: phpBB Garage v1.2.0 - Beta3 Remote SQL Injection Vulnerability Dork: "Powered By phpBB Garage 1.2.0" Author: maku234 E-Mail: [email protected] garage.php?mode=browse&search=yes&makeid=-1//union//select//1,2/...

phpBB links.php SQL注入漏洞

phpBB 是一款基于PHP的WEB应用程序。 phpBB 不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是links.php脚本对用户提交的cat参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 http://www.phpbb.com/ http://sebug.net/exploit/2589/...

PHPBB links.php Remote SQL Injection

No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...

CVE-2003-1530

The CVE-2003-1530 entry affects phpBB up to version 2.0.3 and earlier, where the vulnerability resides in privmsg.php. The underlying issue is an SQL injection via the mark[] parameter, enabling remote attackers to execute arbitrary SQL commands. The available documents do not specify exact affec...