CVE-2007-2859

SimpGB 1.46.0 is affected by CVE-2007-2859. The vulnerability allows remote attackers to execute arbitrary PHP code via a URL in the path_simpgb parameter across multiple PHP scripts (guestbook.php, search.php, mailer.php, avatars.php, ccode.php, comments.php, emoticons.php, gbdownload.php). Root...

PT-2007-4163 · Simpgb · Simpgb

Name of the Vulnerable Software and Affected Versions: SimpGB version 1.46.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path simpgb parameter to various PHP scripts, including "guestbook.php", "search.php", "mailer.php", "avatars.php", "ccode.php...

CVE-2007-2859: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pathsimpgb parameter to 1 guestbook.php, 2 search.php, 3 mailer.php, 4 avatars.php, 5 ccode.php, 6 comments.php, 7 emoticons.php, 8 gbdownload.php, and possibl...

simpgb-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

SimpGB v1.46.0 Remote File Include Exploit

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CVE-2005-0786

CVE-2005-0786 is a SQL injection vulnerability in SimpGB where the quote parameter of guestbook.php is unsafely used in queries via gb_new.inc. The issue allows unauthenticated remote attackers to manipulate queries, reading or modifying data and potentially executing commands on the web server. ...

CVE-2005-0786

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

CVE-2005-0786: Undefined Security Weakness

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

simpgbSQL.txt

Hi, The PHP guestbook SimpGB 1, written by Boesch IT-Consulting 2 can be exploited to gain userdata. The quote variable isn't checked carefully in simpgb/include/gbnew.inc called by guestbook.php. I wrote a proof of concept which shows a md5 hash and the username, read from the database...

SimpGB SQL Injection Vulnerability

Hi, The PHP guestbook SimpGB 1, written by Boesch IT-Consulting 2 can be exploited to gain userdata. The quote variable isn't checked carefully in simpgb/include/gbnew.inc called by guestbook.php. I wrote a proof of concept which shows a md5 hash and the username, read from the database...

SimpGB guestbook.php quote Parameter SQL Injection

The remote host is running SimpGB, a web-based guestbook application written in PHP. The version of SimpGB installed on the remote host fails to sanitize user input to the 'quote' parameter of the 'guestbook.php' script before using it in SQL queries. An unauthenticated, remote attacker can...

CVE-2005-0786

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

SimpGB < 1.35.2 guestbook.php quote Parameter SQL Injection

Binary data 2706.prm...

SimpGB 1.0 - Guestbook.php SQL Injection

SimpGB 1.0 - Guestbook.php SQL Injection source: https://www.securityfocus.com/bid/12801/info SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it...