449 matches found
[SA16908] PunBB Two Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PunBB < 1.2.8 Multiple Vulnerabilities
According to its banner, the version of PunBB installed on the remote host suffers from several flaws. - A File Include Vulnerability The application fails to validate the 'language' parameter when a user updates his profile and uses that throughout the application to require PHP code in order to...
PunBB < 1.2.8 Multiple Vulnerabilities
Binary data 3235.prm...
PunBB < 1.2.7 Multiple Vulnerabilities
The version of PunBB installed on the remote host suffers from several flaws. - Multiple SQL Injection Vulnerabilities The application fails to adequately sanitize user- supplied input to the 'searchid' parameter of the 'search' script as well as an unspecified parameter in one of the admin scrip...
punBB < 1.2.7 Multiple SQL Injection Vulnerabilities
Binary data 3220.prm...
[SA16775] PunBB Multiple Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Echo Security Advisory 2005.22
ECHOADV22$2005 --------------------------------------------------------------------------- PunBB BBCode IMG Tag Script Injection Vulnerability --------------------------------------------------------------------------- Author: y3dips Date: August, 20th 2005 Location: Indonesia, Jakarta Web:...
PunBB BBCode IMG Tag Script Injection Vulnerability
--------------------------------------------------------------------------- PunBB BBCode IMG Tag Script Injection Vulnerability --------------------------------------------------------------------------- Author: y3dips Date: August, 20th 2005 Location: Indonesia, Jakarta Web:...
CVE-2005-2193
CVE-2005-2193 affects PunBB up to version 1.2.5, where the profile.php:temp parameter is not initialized/sanitized before being used in a database query, enabling remote SQL injection. The root cause is improper handling of the temp array, allowing attacker-controlled input to influence SQL state...
CVE-2005-2193
SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being...
PunBB < 1.2.6 Multiple Vulnerabilities
The remote version of PunBB contains a flaw in its template system that can be exploited to read arbitrary local files or, if an attacker can upload a specially crafted avatar, to execute arbitrary PHP code. In addition, the application fails to sanitize the 'temp' parameter of the 'profile.php'...
[Full-disclosure] Advisory 08/2005: PunBB SQL Injection Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PunBB SQL Injection Vulnerability Release Date: 2005/08/05 Last Modified: 2005/08/05 Author: Stefan Esser [email protected] Application: PunBB = 1.2.5 Severity: An...
PunBB 1.x - profile.php User Profile Edit Module SQL Injection
PunBB 1.x - profile.php User Profile Edit Module SQL Injection source: https://www.securityfocus.com/bid/14195/info PunBB is affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input through the user profile edit module o...
PunBB 1.x - 'profile.php' User Profile Edit Module SQL Injection
source: https://www.securityfocus.com/bid/14195/info PunBB is affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input through the user profile edit module of the 'profile.php' script before using it in a SQL query...
[Full-disclosure] Advisory 09/2005: PunBB arbitrary PHP code inclusion vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PunBB arbitrary PHP code inclusion vulnerability Release Date: 2005/08/05 Last Modified: 2005/08/05 Author: Stefan Esser [email protected] Application: PunBB = 1.2.5...
punBB < 1.2.6 profile.php $temp Parameter SQL Injection (deprecated)
Binary data 3058.prm...
CVE-2005-1051
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a changeemail action...
CVE-2005-0569
Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 language parameter to register.php, 2 change email feature in profile.php, 3 posts or 4 topics parameter to moderate.php...