Simple Forum PHP - Multiple SQL Injections

Simple Forum PHP - Multiple SQL Injections source: https://www.securityfocus.com/bid/54024/info Simple Forum PHP is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

Simple Forum PHP - Multiple Vulnerabilities

Simple Forum PHP - Multiple Vulnerabilities Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new...

TinyBrowser Remote File upload Vulnerability

No description provided by source. TinyBrowser Remote File upload Vulnerability Prodcut: TinyBrowser Home : www.dz4all.com/cc Vunlerability : Remote File upload Risk : High Dork : inurl:"tinybrowser.php?" Discovred by: Ra3cH From : Algeria Contact : [email protected] Exploit:...

CVE-2008-7040

SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

Sql injection

SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

CVE-2008-7040

CVE-2008-7040 affects the WordPress Simple Forum plugin using the Yellow Swordfish Simple Forum module. The vulnerable component is ahah/sf-profile.php, exploitable via the u parameter to perform SQL injection and allow remote execution of arbitrary SQL commands. The issue is disclosed with cavea...

WordPress Simple Forum Plugin - SQL Injection

Because of this vulnerability in ahah/sf-profile.php, the attackers can execute arbitrary SQL commands via the "u" parameter. Solution Update the plugin...

Directory traversal

Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-5604

The CVE-2008-5604 issue affects My Simple Forum 3.0 and 4.1, where a directory traversal flaw in index.php allows remote attackers to include and execute local files via a .. in the action parameter when magic_quotes_gpc is disabled. This is a file-path handling vulnerability that can compromise ...

CVE-2008-5604

Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

mysimpleforum-lfi.txt

/ $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura / Source...

My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability

No description provided by source. / $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy,...

My Simple Forum 3.0 - Local File Inclusion

/ $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura / Source...

My Simple Forum 3.0 (index.php action) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================= My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability ========================================================================= / $Id:...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final exposes a weak access control that lets remote attackers change the administrator password via a direct request to modules/simpleforum/admin/index.php. This CVE describes an access-persistence risk without detailing specific exploit vectors bey...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1', 'enableIDs' = '0', 'enableSignature' = '1', 'enableRefererCheck' = '0'...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

Exploit for unknown platform in category web applications ===================================================================== LoveCMS 1.6.2 Final Simple Forum 3.1d Change Admin Password Exploit ===================================================================== 'en', 'forumWidth' = '500',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

LoveCMS 1.6.2 Final Simple Forum 3.1d - Change Admin Password 'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

No description provided by source. ?php / LoveCMS 1.6.2 Final Simple Forum 3.1d Change Admin Password Exploit Vulnerability found & exploited by cOndemned Download: http://www.thethinkingman.net/modules/downloadmanager/?id=4 Description: This exploit changes forum admin password ex. attacker will...