449 matches found
Puntal 2.1.0 - Remote File Inclusion
==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...
PunBB 1.2 XSS Vulnerability
Exploit for php platform in category web applications =========================== PunBB 1.2 XSS Vulnerability =========================== @Title: PunBB 1.2 XSS Vulnerability @Author: TheExploited aka l3d aka Spoof @Mail: email protected @Site: http://site.securityspl0its.com/ -...
PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability
Exploit for php platform in category web applications =========================================================== PunBB Automatic Image Upload 1.0 Shell Upload Vulnerability =========================================================== @Title: PunBB Image Upload 1.0 Shell Upload Vulnerability...
CVE-2010-0455
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
CVE-2010-0455
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
CVE-2010-0455
PunBB 1.3 is affected by a cross-site scripting (XSS) vulnerability in forum/viewtopic.php via the pid parameter. The root cause is insufficient sanitization of user-supplied pid, allowing remote attackers to inject script or HTML and execute in victims’ browsers (e.g., to steal cookies) as descr...
PunBB 1.3 - 'viewtopic.php' Cross-Site Scripting Vulnerability
PunBB 1.3 'viewtopic.php' Cross-Site Scripting Vulnerability. CVE-2010-0455. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37930/info PunBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...
PunBB 1.3 Cross Site Scripting
oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...
PunBB Extension Attachment 1.0.2 - SQL Injection
PunBB Extension Attachment 1.0.2 - SQL Injection !/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork:...
PunBB Extension Attachment <= 1.0.2 SQL Injection
Exploit for unknown platform in category web applications ================================================= PunBB Extension Attachment = 1.0.2 SQL Injection ================================================= !/usr/bin/php ?php printr'...
PunBB Extension Attachment <= 1.0.2 SQL Injection
No description provided by source. !/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork: "Powered by PunBB"...
PunBB Extension Attachment 1.0.2 SQL Injection
!/usr/bin/php ?php printr' +-------------------------------------------------------------------------- -+ Punbb Extension Attachment = v1.0.2 Bind SQL injection exploit by purett mail: puretot at gmail dot com team: http://www.wolvez.org dork: "Powered by PunBB"...
PunBB Extension Attachment 1.0.2 - SQL Injection
!/usr/bin/php $timeout $pass...
PunBB pun_attachment上传附件扩展sql注射漏洞
本来想给论坛加个上传附件的功能，从官方网站下了个punattachment，顺便看了下代码，结果发现了这个漏洞:p if isset$GET'securestr' if pregmatch'\d+f\d+', $GET'securestr', $match ... 'WHERE' = 'a.id = '.$attachitem.' AND fp.readforum IS NULL OR fp.readforum = 1 AND securestr = ''.$GET'securestr'.'''...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...
CVE-2008-7241
Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...
CVE-2008-7241
PunBB susceptible to a CSRF issue in versions before 1.2.17, allowing remote attackers to hijack a user’s session for logout-related actions (likely forced logout). Affected component: PunBB core logout request handling. Root cause described as CSRF vulnerability enabling unauthorized logout acti...
CVE-2008-7241
Cross-site request forgery CSRF vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout...
CVE-2009-2786
SQL injection vulnerability in reputation.php in the Reputation plugin 2.2.4, 2.2.3, 2.0.4, and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the poster parameter...