GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection

Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-4066 Gnuboard = 4.33.02 PATHINFO SQL...

Gnuboard <= 4.33.02 tp.php PATH_INFO SQL Injection

Exploit for php platform in category web applications Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apach...

Kaleidoscope System CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Kaleidoscope System CMS SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

[email protected] WebContent CMS Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= email protected WebContent CMS Multiple SQL Injection Vulnerability =============================================================...

Cybershop CMS SQL Multiple Injection Vulnerability

Exploit for php platform in category web applications ================================================== Cybershop CMS SQL Multiple Injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Sir Tim Berners-Lee is a cybercrime victim

By Richard Gray, Telegraph.co.uk Sir Tim Berners-Lee, the creator of the worldwide web, has revealed how he fell victim to online fraudsters while trying to buy a gift over the internet. From the article: “The worst thing that has happened to me was when I tried to buy a Christmas present from a...

Directory traversal

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the g4path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathnam...

CVE-2009-0290

CVE-2009-0290 concerns a directory traversal in SIR GNUBoard 4.31.03, where an attacker can use a .. in the g4_path parameter to include and execute local files. The vulnerability allows potential remote code execution via data: URIs or UNC paths in certain environments. Affected software is GNUB...

CVE-2008-2812

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service system crash or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in 1 hamradio/6pack.c, 2 hamradio/mkiss.c, 3...

PT-2008-4251 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.25.10 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, or possibly gain privileges. This is achieved through vectors involving NULL pointer...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...

MS08-068 Microsoft Windows SMB Relay Code Execution

This module will relay SMB authentication requests to another host, gaining access to an authenticated SMB session if successful. If the connecting user is an administrator and network logins are allowed to the target machine, this module will execute an arbitrary payload. To exploit this, the...