449 matches found
CVE-2005-0818
Cross-site scripting XSS vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the 1 email or 2 Jabber parameters...
punbb_email_sql_injection.txt
!/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database is still user-supplied data import...
CVE-2005-1051
CVE-2005-1051 affects PunBB 1.2.4: a SQL injection in profile.php via the id parameter in the change_email action. The vulnerability requires an authenticated remote user and allows arbitrary SQL execution, with reported potential for modification of database queries and administrative access. Do...
CVE-2005-1072
The CVE-2005-1072 entry describes a Cross-site Scripting (XSS) vulnerability in PunBB versions prior to 1.2.5, allowing remote attackers to inject arbitrary web script or HTML. The description explicitly states the affected product and the vulnerability type, with the impact limited to injection ...
CVE-2005-1051
SQL injection vulnerability in profile.php in PunBB 1.2.4 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a changeemail action...
CVE-2005-1072
Cross-site scripting XSS vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML...
PunBB 1.2.4 (change_email) SQL Injection Exploit
No description provided by source. !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database...
PunBB 1.2.4 - id SQL Injection
PunBB 1.2.4 - id SQL Injection !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database is...
PunBB 1.2.4 (change_email) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================ PunBB 1.2.4 changeemail SQL Injection Exploit ================================================ !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,|||...
PunBB 1.2.4 - 'id' SQL Injection
!/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database is still user-supplied data import...
PunBB <= 1.2.4 - change email to become admin exploit
!/usr/bin/python | || | | | | | | | || || | |/ || '|/ |/ -| ' / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database is still user-supplied data import urllib...
[SA14882] PunBB SQL Injection and Cross-Site Scripting Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PunBB SQL Injection and Cross-Site Scripting...
CVE-2005-1072
Cross-site scripting XSS vulnerability in PunBB before 1.2.5 allows remote attackers to inject arbitrary web script or HTML...
PunBB profile.php id Parameter SQL Injection
According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'changeemail' parameter prior to using it in a SQL query. Once authenticated, an attacker can exploit this flaw to manipulate database queries,...
punBB < 1.2.5 profile.php SQL Injection
Binary data 2807.prm...
r57punbb.pl.txt
!/usr/bin/perl use IO::Socket; PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user authorisation failed if !isset$punuser'id' || md5$cookieseed.$punuser'password' ...
PunBB version <= 1.2.2 Authentication Bypass Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; PunBB version = 1.2.2 auth bypass exploit ------------------------------------------------- About vuln: lets look file /include/functions.php code start function checkcookie&$punuser ... if isset$COOKIE$cookiename...
PunBB version <= 1.2.2 Authentication Bypass Exploit
Exploit for unknown platform in category web applications ==================================================== PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user...
PunBB 1.2.2 - Authentication Bypass
PunBB 1.2.2 - Authentication Bypass !/usr/bin/perl use IO::Socket; PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user authorisation failed if !isset$punuser'id' |...
PunBB 1.2.2 - Authentication Bypass
!/usr/bin/perl use IO::Socket; PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user authorisation failed if !isset$punuser'id' || md5$cookieseed.$punuser'password' ...