CVE-2007-2234

include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled iniget function when checking the registerglobals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the searchid parameter to search.php...

PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)

Title: PunBB = 1.2.14 Multiple Vulnerabilities Author: DarkFig gmdarkfig at gmail dot com Written on: 2007/04/08 Released on: 2007/04/11 Risk level: High URL: http://www.acid-root.new.fr/advisories/13070411.txt Summary: SQL Injection, Cross site scripting, Code execution Solution: A new version o...

13070411-sploit.txt

!/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -usr -pwd Options Params: -url For example http://victim.com/punBB/ -usr User account 1 post at least -pwd Password account Options: -uid Admin id default=2...

PunBB <= 1.2.14 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; if$argc 7 print" ----------- PunBB = 1.2.14 Remote Code Execution Exploit ----------- ----------------------------------------------------------------------- PHP conditions: See...

PunBB 1.2.14 - Remote Code Execution

PunBB 1.2.14 - Remote Code Execution !/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -usr -pwd Options Params: -url For example http://victim.com/punBB/ -usr User account 1 post at least -pwd Password accou...

PunBB 1.2.14 - Remote Code Execution

!/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -usr -pwd Options Params: -url For example http://victim.com/punBB/ -usr User account 1 post at least -pwd Password account Options: -uid Admin id default=2...

eCardMAX HotEditor 4.0 - Keyboard.php Local File Inclusion

eCardMAX HotEditor 4.0 - Keyboard.php Local File Inclusion source: https://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view...

eCardMAX HotEditor 4.0 - 'Keyboard.php' Local File Inclusion

source: https://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. HotEditor 4.0 is...

NucleusCMS/Blog:CMS/PunBB未明远程文件包含漏洞

CMS/Blog:CMS/PunBB是基于WEB的BLOG系统和论坛系统。CMS/Blog:CMS/PunBB对用户提交的URI参数缺少充分过滤，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。目前没有详细漏洞细节提供 PunBB PunBB 1.0-1.1.4/Nucleus CMS 3.0-3.0 RC/BLOG:CMS 3.0-3.1.3 厂商补丁：BLOG:CMS--------目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：BLOG:CMS Upgrade BLOG:CMS...

CVE-2006-5736

SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the resultlist array parameter, which is not initialized...

CVE-2006-5738

Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5737

PunBB uses a predictable cookieseed value that can be derived from the time of registration of the superadmin account installation time, which might allow local users to perform unauthorized actions...

CVE-2006-5735

Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the language parameter, related to register.php storing a language value in the users table...

CVE-2006-5736

Technical details for CVE-2006-5736 are not present in the provided connected documents. The initial description lacks concrete product/version specifics in this context. Monitor for updates.

CVE-2006-5736

SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the resultlist array parameter, which is not initialized...

CVE-2006-5735

PunBB does suffer a local file inclusion/traversal in include/common.php via the language parameter, enabling an authenticated user to influence register.php language storage. The vulnerability affects PunBB prior to version 1.2.14, with the exploit path described as including arbitrary local fil...

CVE-2006-5737

PunBB is affected by CVE-2006-5737. The vulnerability arises from a predictable cookie_seed value that can be derived from the time of registration/installation of the superadmin account, which may allow local users to perform unauthorized actions. The available sources describe the root cause as...

CVE-2006-5738

CVE-2006-5738 affects PunBB prior to 1.2.14. The vulnerability is a set of SQL injection flaws that allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. Affected component: PunBB’s code path used by admin actions that trust authenticated users. Root...

CVE-2006-5737

PunBB uses a predictable cookieseed value that can be derived from the time of registration of the superadmin account installation time, which might allow local users to perform unauthorized actions...

CVE-2006-5738

Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors...