PunBB Affiliations.php IN 1.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

PunBB AP_DB_management.php SQL Injection

Author: Dante90, WaRWolFz Crew Title: PunBB APDBmanagement.php Remote SQL Injection CSRF By Dante90 0-Day MSN: [email protected] Web: www.warwolfz.org 0-Day & Priv8 PunBB Administration Plug-In APDBmanagement.php Remote SQL Injection CSRF Exploit By Dante90 code 0-Day & Priv8 PunBB...

CVE-2008-6308

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

Directory traversal

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

CVE-2008-6308

Multiple directory traversal vulnerabilities in Private Messaging System PMS 1.2.3 and earlier for PunBB allow remote attackers to include and execute arbitrary files via a .. dot dot in the punuserlanguage parameter to 1 functionsnavlinks.php, 2 headernewmessages.php, 3 profilesend.php, and 4...

CVE-2008-6308

CVE-2008-6308 affects the Private Messaging System (PMS) 1.2.3 and earlier for PunBB. A directory-traversal flaw allows remote attackers to include and execute arbitrary files via a .. in the pun_user[language] parameter targeting include/pms/ files (functions_navlinks.php, header_new_messages.ph...

CVE-2008-5434

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

Sql injection

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-5435

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

Cross site scripting

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-5433

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

CVE-2008-5434

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-5434

CVE-2008-5434 affects PunBB 1.3 and 1.3.1, with multiple SQL injection vulnerabilities exploitable by remote authenticated administrators via (1) order_by or (2) direction in admin/users.php, and (3) configuration options in admin/settings.php. The underlying issue enables arbitrary SQL command e...

CVE-2008-5435

CVE-2008-5435 concerns an XSS vulnerability in PunBB, exposed in moderate.php for PunBB versions prior to 1.3.1. The issue allows remote attackers to inject arbitrary web script or HTML via a topic subject, potentially impacting integrity (partial) and not confidentiality or availability, per the...

CVE-2008-5433

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

CVE-2008-5435

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-5433

CVE-2008-5433 is a cross-site scripting (XSS) vulnerability in PunBB 1.3 and 1.3.1, exploitable via the password field in login.php. The provided documents describe an ability for remote attackers to inject arbitrary web script or HTML, constituting a vulnerability in the login mechanism. The NVD...