Puntal 2.1.0 Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability

Exploit for php platform in category web applications =========================================================== PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability =========================================================== @Title: PunBB Image Upload 1.0 Shell Upload Vulnerability...

PunBB 1.2 XSS Vulnerability

Exploit for php platform in category web applications =========================== PunBB 1.2 XSS Vulnerability =========================== @Title: PunBB 1.2 XSS Vulnerability @Author: TheExploited aka l3d aka Spoof @Mail: email protected @Site: http://site.securityspl0its.com/ -...

CVE-2010-0455

Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...

CVE-2010-0455

Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...

CVE-2010-0455

PunBB 1.3 is affected by a cross-site scripting (XSS) vulnerability in forum/viewtopic.php via the pid parameter. The root cause is insufficient sanitization of user-supplied pid, allowing remote attackers to inject script or HTML and execute in victims’ browsers (e.g., to steal cookies) as descr...

PunBB 1.3 - 'viewtopic.php' Cross-Site Scripting Vulnerability

PunBB 1.3 'viewtopic.php' Cross-Site Scripting Vulnerability. CVE-2010-0455. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37930/info PunBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

PunBB 1.3 Cross Site Scripting

oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...

PunBB Extension Attachment 1.0.2 - SQL Injection

!/usr/bin/php $timeout $pass...

PunBB Extension Attachment <= 1.0.2 SQL Injection

No description provided by source. !/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork: "Powered by PunBB"...

PunBB Extension Attachment <= 1.0.2 SQL Injection

Exploit for unknown platform in category web applications ================================================= PunBB Extension Attachment = 1.0.2 SQL Injection ================================================= !/usr/bin/php ?php printr'...

PunBB Extension Attachment 1.0.2 SQL Injection

!/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork: "Powered by PunBB"...

PunBB Extension Attachment 1.0.2 - SQL Injection

PunBB Extension Attachment 1.0.2 - SQL Injection !/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork:...

PunBB pun_attachment上传附件扩展sql注射漏洞

本来想给论坛加个上传附件的功能，从官方网站下了个punattachment，顺便看了下代码，结果发现了这个漏洞:p if isset$GET'securestr' if pregmatch'\d+f\d+', $GET'securestr', $match ... 'WHERE' = 'a.id = '.$attachitem.' AND fp.readforum IS NULL OR fp.readforum = 1 AND securestr = ''.$GET'securestr'.'''...

CVE-2008-7241

Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...

CVE-2008-7241

PunBB susceptible to a CSRF issue in versions before 1.2.17, allowing remote attackers to hijack a user’s session for logout-related actions (likely forced logout). Affected component: PunBB core logout request handling. Root cause described as CSRF vulnerability enabling unauthorized logout acti...

CVE-2008-7241

Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...

CVE-2009-2787

Directory traversal vulnerability in include/reputation/repprofile.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the...