451 matches found
Simple Machines Forum (SMF) 1.0.131.1.5 - Destroyer 0.1 Password Reset Security Bypass
Simple Machines Forum SMF 1.0.131.1.5 - Destroyer 0.1 Password Reset Security Bypass !/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com Cracks links Password Recovery Find Temporary Files executed by mods DB function Flood b...
Seo4SMF for SMF forums - Multiple Vulnerabilities
Seo4SMF for SMF forums - Multiple Vulnerabilities 1 Inyection SQL Linea 50 al 63 $query = dbquery" SELECT m.IDTOPIC, m.subject ,b.IDBOARD, b.name FROM $dbprefixmessages AS m, $dbprefixboards AS b WHERE m.IDTOPIC = $topic AND m.IDBOARD = b.IDBOARD IMIT 1", FILE, LINE;...
Seo4SMF for SMF forums - Multiple Vulnerabilities
1 Inyection SQL Linea 50 al 63 $query = dbquery" SELECT m.IDTOPIC, m.subject ,b.IDBOARD, b.name FROM $dbprefixmessages AS m, $dbprefixboards AS b WHERE m.IDTOPIC = $topic AND m.IDBOARD = b.IDBOARD IMIT 1", FILE, LINE; ------------------------------------------------------------------------ Linea...
Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution
!/usr/bin/perl @title: Simple Machines Forum Code Execution @versn: perl P:\advisories\smf\smflocalfileinclude.pl -s http://localhost/audit/smf116 -u regular -p test -d ii 0day Simple Machines Forum new cookiejar = , agent = "Mozilla FireFox" ; my %parms = s = "", d = 0, x = sub print " Proxy...
Simple Machines Forum (SMF) 1.1.6 - Code Execution
URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some of them, we can obtain a remote code execution on the remote host. I won't talk here about all of them, but I'll explain how we can execute code. ...
Simple Machines Forum (SMF) 1.1.6 Code Execution Exploit
No description provided by source. ?php Simple Machines Forum SMF 1.1.6 Remote Code Execution Exploit Credits: Charles FOL charlesfolathotmail.fr URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some ...
Simple Machines Forum (SMF) 1.1.6 - Code Execution
Simple Machines Forum SMF 1.1.6 - Code Execution URL: http://real.olympe-network.com/ Note: other versions are maybe vulnerable, not tested. SMF suffers from multiples vulnerabilities. Combining some of them, we can obtain a remote code execution on the remote host. I won't talk here about all of...
Simple Machines Forum (SMF) 1.1.6 - POST Filter Security Bypass
Simple Machines Forum SMF 1.1.6 - POST Filter Security Bypass source: https://www.securityfocus.com/bid/31594/info Simple Machines Forum SMF is prone to a security-bypass vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to...
Simple Machines Forum < 1.1.6 Random Number Generator Credentials Disclosure
Binary data 4646.prm...
Simple Machines Forum <= 1.1.5 Admin Reset Password Exploit (win32)
Exploit for unknown platform in category web applications =================================================================== Simple Machines Forum = 1.1.5 Admin Reset Password Exploit win32 =================================================================== ?php echo...
Simple Machines Forum (SMF) 1.1.5 (Windows x86) - Admin Reset Password
?php echo "---------------------------------------------------------------\n"; echo "SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n"; echo "coded by Raz0r http://Raz0r.name/\n"; echo "---------------------------------------------------------------\n"; if $argc3 echo "USAGE:\n"; ec...
Cross site scripting
Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...
CVE-2008-3072
CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...
CVE-2008-3073
CVE-2008-3073 affects Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13. Description indicates unknown impact and attack vectors, probably cross-site scripting (XSS) related to “use of the html-tag.” NVD CVSS2 base score 7.5 (HIGH) with network vector and low complexity; part...
CVE-2008-3072
Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...
SMF <= 1.1.4 COOKIE[topic] SQL-Injection Exploit
Здравствуйте, Зараза. Поддержим отечественного произодителя. SMF = 1.1.4 COOKIEtopic SQL-Injection Exploit www.simplemachines.org Уязвимость заключается в неопределенном параметре $topic. Атакующий может определить его значение и выполнить произольный SQL-запрос в базу данных приложения...
Simple Machines Forum (SMF) 1.1.4 - SQL Injection
Simple Machines Forum SMF 1.1.4 - SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...
Design/Logic Flaw
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...