CVE-2007-0399

SMF 1.1 RC3 exposes multiple XSS flaws in index.php during the PM “send” action. Infected input (recipient/BCC fields) can inject arbitrary script/HTML in the context of an authenticated user. Affected: Simple Machines Forum (SMF), version 1.1 RC3; vulnerability arises in the PM sending workflow....

Unrestricted file upload

Unrestricted file upload vulnerability in index.php in phpBP RC3 2.204 and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an imageform parameter specifying a multiple-extension filename...

Sql injection

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

CVE-2007-0369

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

phpBP RC3 (2.204) - SQL Injection Remote Code Execution

phpBP RC3 2.204 - SQL Injection Remote Code Execution ? // //Kacper & str0ke Settings $exploitname = "phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit"; $scriptname = "phpBP RC3 2.204"; $scriptsite = "http://www.phpbp.com/"; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP...

SAPID CMS <= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit

No description provided by source. Title: SAPID CMS Multiple remote Command Execution Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 Published : 08 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website :...

CVE-2006-5675

Multiple unspecified vulnerabilities in Pentaho Business Intelligence BI Suite before 1.2 RC3 1.2.0.470-RC3 have unknown impact and attack vectors, related to "MySQL Scripts need changes for security," possibly SQL injection vulnerabilities associated with these scripts...

CVE-2006-4716

PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board FSB RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...

CVE-2006-4716

CVE-2006-4716 affects Fire Soft Board (FSB) RC3 and earlier. The vulnerability is a PHP remote file inclusion in demarrage.php, exploitable via the racine parameter to execute arbitrary PHP code. Exploit status is not provided in the supplied documents; CVSS/metrics indicate HIGH risk (7.5). No r...

CVE-2006-4564

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...

CVE-2006-4564

CVE-2006-4564 describes an SQL injection vulnerability in Simple Machines Forum (SMF) 1.1 RC3, occurring in Sources/ManageBoards.php. The vulnerability is exploitable via the cur_cat parameter, enabling remote attackers to execute arbitrary SQL commands. The CVSS v2 base score is 5.1 (Medium) wit...

Sql injections in e107 [Admin section]

Hi, There is a sql injection in SMF 1.1 RC3, in admin section : When an administrator is going to add a new board, the "curcat" parameter is not checked properly : File /Sources/ManageBoards.php, Line 609 : :: // Create a new board... :: if isset$POST'add' :: :: // New boards by default go to the...

CVE-2006-3572

The vulnerability CVE-2006-3572 affects Papoo 3 RC3 and earlier, specifically the forumthread.php component. The root cause is an SQL injection in the msgid parameter, which could allow remote attackers to execute arbitrary SQL commands. The issue is documented with a base CVSS v2 score of 7.5 (H...

CVE-2006-3572

SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2006-3571

CVE-2006-3571: Multiple cross-site scripting (XSS) flaws in Papoo 3 RC3 and earlier affect interna/hilfe.php. The vulnerability allows remote injection of arbitrary web script/HTML via the (1) titel and (2) ausgabe parameters. Impact described only as XSS without official patch details in the pro...

Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions

Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ca...

Mambo Componen phpBB 1.2.4 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

[Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.

--Security Report-- Advisory: EzASPSite = 2.0 RC3 Remote SQL Injection Exploit Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 29/03/06 21:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: EzASPSite...

Integer overflow

Integer overflow in the doreplace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAPNETADMIN rights to cause a buffer overflow in the copyfromuser function...

PT-2006-1129 · Linux +2 · Netfilter +3

Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.16-rc3 Description: The issue is related to an integer overflow in the do replace function in netfilter for Linux. This can be exploited by local users with CAP NET ADMIN rights to cause a buffer overflow in the co...