CVE-2005-4135

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header possibly the name parameter or variable, which is then written to data/topics.php...

CVE-2005-4135

CVE-2005-4135 affects SimpleBBS 1.1 and earlier. The vulnerability is a direct static code injection in includes/newtopic.php that allows remote code execution via shell metacharacters in the Host header (potentially the name parameter or variable), which is then written to data/topics.php. This ...

CVE-2005-4135: Undefined Security Weakness

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header possibly the name parameter or variable, which is then written to data/topics.php...

SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew

/ SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/ cmd $ ./bbs www.somesite.com...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...

SimpleBBS 1.1 - Remote Command Execution

/ SimpleBBS !--total 188 drwxrwxrwx 2 f1 f1 4096 Dec 6 17:02 . drwxr-xr-x 7 f1 f1 4096 Nov 17 2002 .. -rw-r--r-- 1 f1 f1 916 Oct 20 09:30 WSFTP.LOG -rwxrwxrwx 1 f1 f1 28 Nov 17 2002 categories.php -rwxrwxrwx 1 f1 f1 151 Dec 7 09:11 forums.php -rwxrwxrwx 1 f1 f1 0 Nov 17 2002 index.php -rwxrwxrwx ...

SimpleBBS 1.1 - Remote Command Execution (C)

SimpleBBS 1.1 - Remote Command Execution C / SimpleBBS !--total 188 drwxrwxrwx 2 f1 f1 4096 Dec 6 17:02 . drwxr-xr-x 7 f1 f1 4096 Nov 17 2002 .. -rw-r--r-- 1 f1 f1 916 Oct 20 09:30 WSFTP.LOG -rwxrwxrwx 1 f1 f1 28 Nov 17 2002 categories.php -rwxrwxrwx 1 f1 f1 151 Dec 7 09:11 forums.php -rwxrwxrwx ...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

Exploit for unknown platform in category web applications =========================================================== SimpleBBS !--total 188 drwxrwxrwx 2 f1 f1 4096 Dec 6 17:02 . drwxr-xr-x 7 f1 f1 4096 Nov 17 2002 .. -rw-r--r-- 1 f1 f1 916 Oct 20 09:30 WSFTP.LOG -rwxrwxrwx 1 f1 f1 28 Nov 17 2002...

SimpleBBS <= 1.1 Remote Commands Execution Exploit

Exploit for unknown platform in category web applications ================================================== SimpleBBS this works regardless of magicquotesgpc settings usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "He will win who knows when to fight and when not to fight...

CVE-2005-4027

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters...

CVE-2005-4027

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters...

CVE-2005-4027

CVE-2005-4027 affects SimpleBBS 1.1. The issue is a SQL injection vulnerability reported to allow remote attackers to execute arbitrary SQL commands via unspecified search module parameters. The provided sources list a CVSS2 base score of 7.5 (HIGH) with network attack vector, low complexity, and...

CVE-2005-4027: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters...

SimpleBBS v1.1 SQL inj. vuln.

SimpleBBS v1.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html affected version: v1.1 and prior Product Description: SimpleBBS is a free flat-file based bulletin board. It is very easy to install and...

SimpleBBS users disclosure

The remote installation of SimpleChat allows an unauthenticated, remote attacker to retrieve its user database via a direct request to 'data/usr', which contains confidential information such as user passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

SimpleBBS 1.0.6 Default Permissions Vuln

SimpleBBS 1.0.6 Security Problem: User database stored in a php file that's readable by anyone. http://www.tareget.com/simplebbs/users/users.php Passwords are md5'ed, but user data is not. The vendor was notified and has released updates. FluRDoInG [email protected] http://www.flurnet.org KEY ID...

SimpleBBS 1.0.6 - 'users.php' Insecure File Permissions

source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the SimpleBBS user database. This vulnerability was reported...

SimpleBBS 1.0.6 - users.php Insecure File Permissions

SimpleBBS 1.0.6 - users.php Insecure File Permissions source: https://www.securityfocus.com/bid/7045/info SimpleBBS reportedly creates sensitive files with world-readable permissions. As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the...