wbb<<--v 2.1.6 "profile.php" SQL injection

============================================== Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================== Example:-...

FunkBoardCF0.71.txt

Title : FunkBoard CF0.71 profile.php Remote User Pass Change Exploit Author : ajann REMOTE USER PASS CHANGE EXPLOİT; Change: = ID AND action Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...

CVE-2006-2896

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action...

CVE-2006-2896

CVE-2006-2896: FunkBoard CF0.71 suffers from a vulnerability in profile.php where a remote attacker can change arbitrary passwords by tampering with a hidden uid field in the Edit Profile action. Affected component is the profile handling in FunkBoard CF0.71; root cause is the inability to valida...

CVE-2006-2896: Undefined Security Weakness

profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action...

FunkBoard CF0.71 - 'profile.php' Remote User Pass Change

/str0ke -- Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0 Status td bgcolor="BBBBBB" colspan="3"...

FunkBoard CF0.71 - profile.php Remote User Pass Change

FunkBoard CF0.71 - profile.php Remote User Pass Change /str0ke -- Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...

FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit

No description provided by source. !-- Change action="http://profile.php" under the form tags /str0ke -- !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"htmlheadMETA http-equiv="Content-Type" content="text/html; charset=utf-8"/headbodyform enctype="multipart/form-data"...

TinyPHP Forum <= 3.6 (profile.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl $App : TinyPHP forum = 3.6 Remote Command Execution Exploit $Bug : http://tinyphp/profile.php?action=view&uname=../afile%00 $IHST: h4ckerz.com / hackerz.ir / aria-security.net coded By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use...

Sql injection

SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via 1 the authorid parameter in profile.php and 2 the autid parameter in userarticles.php. NOTE: the autid vector can produce resultant path disclosure if the SQL manipulati...

CVE-2006-2565

SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via 1 the authorid parameter in profile.php and 2 the autid parameter in userarticles.php. NOTE: the autid vector can produce resultant path disclosure if the SQL manipulati...

CVE-2006-2565

SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via 1 the authorid parameter in profile.php and 2 the autid parameter in userarticles.php. NOTE: the autid vector can produce resultant path disclosure if the SQL manipulati...

CVE-2006-2565: Undefined Security Weakness

SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via 1 the authorid parameter in profile.php and 2 the autid parameter in userarticles.php. NOTE: the autid vector can produce resultant path disclosure if the SQL manipulati...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ulocation or 2 uhobbies parameters...

CVE-2006-1916

Multiple cross-site scripting XSS vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ulocation or 2 uhobbies parameters...

CVE-2006-1916

Multiple cross-site scripting XSS vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ulocation or 2 uhobbies parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...

CVE-2006-1898

Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...

CVE-2006-1916: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ulocation or 2 uhobbies parameters...

CVE-2006-1898: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...