CVE-2007-0369

The CVE-2007-0369 entry concerns the PHP-based bulletin board script phpBP RC3 (2.204) and earlier. Affected component is the comment forum handling input in the application’s SQL queries, with root cause described as an SQL injection vulnerability. The consequence is that remote attackers could ...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit"; $scriptname = "phpBP RC3 2.204"; $scriptsite = "http://www.phpbp.com/"; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work...

CVE-2007-0369: Undefined Security Weakness

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

CVE-2007-0370: Undefined Security Weakness

Unrestricted file upload vulnerability in index.php in phpBP RC3 2.204 and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an imageform parameter specifying a multiple-extension filename...

phpBP RC3 (2.204) - SQL Injection Remote Code Execution

phpBP RC3 2.204 - SQL Injection Remote Code Execution ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit"; $scriptname = "phpBP RC3 2.204"; $scriptsite = "http://www.phpbp.com/"; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit ============================================================ ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3...

phpBP RC3 (2.204) - SQL Injection / Remote Code Execution

? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit"; $scriptname = "phpBP RC3 2.204"; $scriptsite = "http://www.phpbp.com/"; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work exploit you need admin session // prin...