CVE-2005-1220

Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which displays usernames and password hashes...

CVE-2005-1220

The CVE-2005-1220 entry describes an information-disclosure vulnerability in Shoutbox SCRIPT 3.0.2 and earlier. An attacker could trigger a direct request to db/settings.dat to obtain usernames and password hashes, indicating a partial confidentiality impact. The connected documents confirm the a...

[Full-disclosure] Shoutbox SCRIPT <= 3.0.2 Administrative MD5 Username and Password Retrieval

-=--------------------ADVISORY-------------------=- -= =- -= Shoutbox SCRIPT = 3.0.2 =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: Shoutbox SCRIPT -=+ Version: 3.0.2 and prior -=+ Vendor's URL:...

CVE-2005-0909

CVE-2005-0909 describes a PHP remote file inclusion in TKai’s Shoutbox “shoutact.php” that lets remote attackers execute arbitrary PHP code via a query parameter. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authentication required, re...

CVE-2005-0909

PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter...

thaiXSS.txt

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

Tkais Shoutbox - Query Open Redirection

Tkais Shoutbox - Query Open Redirection source: https://www.securityfocus.com/bid/12914/info Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter o...

[Full-disclosure] THai's Shoutbox XSS (Spoofing URL) BUG

-=--------------------ADVISORY-------------------=- -= =- -= THai's Shoutbox =- -= =- -= Author: CorryL www.x0n3-h4ck.org =- -= =- -=----------------------------------------------------=- -=+ Application: THai's Shoutbox -=+ Version: not available -=+ Vendor's URL: not available -=+ Platform:...

Tkai's Shoutbox - 'Query' Open Redirection

source: https://www.securityfocus.com/bid/12914/info Tkai's Shoutbox is reported prone to a remote URI redirection vulnerability. It is reported that an attacker can exploit this issue by supplying the URI of a malicious site through the 'query' parameter of a link. A successful attack may result...

CVE-2003-1370

Multiple cross-site scripting XSS vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via 1 the Author field in the Guestbook module, 2 the Titre or Pseudo fields in the Forum module, or 3 "La Tribune Libre" in the Shoutbox module...

Webfroot Shoutbox 2.32 - Viewshoutbox.php Cross-Site Scripting

Webfroot Shoutbox 2.32 - Viewshoutbox.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9289/info Webfroot Shoutbox is prone to a cross-site scripting vulnerability in the 'viewshoutbox.php' script. The source of the problem is that HTML and script code are not adequately sanitiz...

Webfroot Shoutbox 2.32 - 'Viewshoutbox.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9289/info Webfroot Shoutbox is prone to a cross-site scripting vulnerability in the 'viewshoutbox.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI parameters. This input will be...

Webfroot Shoutbox 2.32 - Expanded.php Remote Command Execution

Webfroot Shoutbox 2.32 - Expanded.php Remote Command Execution source: https://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php...

Webfroot Shoutbox 2.32 - Expanded.php Directory Traversal

Webfroot Shoutbox 2.32 - Expanded.php Directory Traversal source: https://www.securityfocus.com/bid/7775/info A problem in Shoutbox may result in traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to the expanded.php script, and could allow the...

Webfroot Shoutbox 2.32 - 'Expanded.php' Directory Traversal

source: https://www.securityfocus.com/bid/7775/info A problem in Shoutbox may result in traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to the expanded.php script, and could allow the viewing of potentially sensitive files by attackers...

Webfroot Shoutbox 2.32 - 'Expanded.php' Remote Command Execution

source: https://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php script...

Webfroot Shoutbox 2.32 directory traversal and code injection.

Products: Webfroot Shoutbox v 2.32 and below http://shoutbox.sf.net Date: 09 May 2003 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Webfroot Shoutbox 2.32 a...

Webfroot Shoutbox 2.32 - Remote Command Execution

Webfroot Shoutbox 2.32 - Remote Command Execution source: https://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can...

Webfroot Shoutbox < 2.32 (Apache) Remote Exploit

No description provided by source. !/usr/bin/perl Webfroot Shoutbox 2.32 on apache exploit use IO::Socket; my $host = "127.0.0.1"; my $port = 80; my $shoutbox = "shoutbox.php?conf="; my $shoutboxpath = "/shoutbox"; my $cmd = "ls -l"; my $conn; my $type; my @logs = "/etc/httpd/logs/acceslog",...

shoutbox.txt

Products: Webfroot Shoutbox v 2.32 and below http://shoutbox.sf.net Date: 09 May 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Webfroot Shoutbox 2.32 and below directory traversal a...