Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

PunBB Mod User_Diaries <= 1.1.4 (diary_rss.php) Sql Injection Exploit

Exploit for php platform in category web applications ===================================================================== PunBB Mod UserDiaries users AS r ON u.posterid=r.id".$where." there's no escape & quotes. ------------------------------------------------------------- file: diaryrss.php |...

PunBB 1.3.x / Pun_PM 1.2.6 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...

PunBB 1.3.4 / Pun_PM 1.2.6 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...

PunBB &lt;= 1.3.4 and Pun_PM &lt;= v1.2.6 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB = 1.3. Package: PunPM = v1.2.6 Remote Blind SQL Injection Exploit Author/s: Dante90, WaRWolFz Crew Created: 2009.07.30 after 0 days the bug was discovered. Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero,...

PunBB 1.3.4 Pun_PM 1.2.6 - Blind SQL Injection

PunBB 1.3.4 PunPM 1.2.6 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subjec...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (5)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (4)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB PunPortal <= 2.1 XSS Vulnerability

Exploit for php platform in category web applications ======================================== PunBB PunPortal Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm TheExploited member...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (3)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB Private Message System <= 1.2.3 XSS Vulnerability (2)

Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...

PunBB Private Message Mod <= 1.2.3 XSS Vulnerability

Exploit for php platform in category web applications ==================================================== PunBB Private Message Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

CVE-2009-4894

Multiple cross-site scripting XSS vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 password or 2 e-mail...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 password or 2 e-mail...

CVE-2009-4894

PunBB contains multiple XSS vulnerabilities in profile.php prior to version 1.3.4 that allow remote attackers to inject arbitrary scripts via the (1) password or (2) e-mail fields. Red Hat/NVD references confirm the same issue; remediation guidance in the sources is to upgrade to PunBB 1.3.4 or l...

CVE-2009-4894

Multiple cross-site scripting XSS vulnerabilities in profile.php in PunBB before 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 password or 2 e-mail...

PunBB Calendar Mod <= 2.0 Multiple XSS Vulnerability

Exploit for php platform in category web applications ==================================================== PunBB Calendar Mod Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

Puntal 2.1.0 - Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

Puntal 2.1.0 - Remote File Inclusion

Puntal 2.1.0 - Remote File Inclusion ==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Puntal 2.1.0 Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...