SoftBB 0.1.3 Cross Site Scripting

CVE-2014-9561 Softbb.net SoftBB XSS Cross-Site Scripting Security Vulnerability Exploit Title: Softbb.net SoftBB /redirlastpostlist.php post Parameter XSS Product: SoftBB mods Vendor: Softbb.net Vulnerable Versions: v0.1.3 Tested Version: v0.1.3 Advisory Publication: Jan 10, 2015 Latest Update: J...

SoftBB 0.1 Page Parameter Cross-Site Scripting Vulnerability

No description provided by source...

SoftBB多个远程代码执行及信息泄露漏洞

SoftBB是一款基于WEB的论坛程序。 SoftBB v0.1中存在多个输入验证错误，如下： 1 在SQL查询时没有正确的验证对/addmembre.php文件中groupe参数及/moveto.php文件中select参数的输入，允许攻击者执行SQL注入攻击。 2 在PHP脚本中存储之前没有正确过滤对admin/saveopt.php中多个参数的输入，允许攻击者执行任意PHP代码。成功攻击可能要求管理员权限。 3 对index.php中page参数的输入没有正确的处理空的或无效的参数，允许攻击者判断安装路径。 SoftBB = 0.1...

CVE-2006-4631

Direct static code injection vulnerability in admin/saveopt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cacheforum parameter, which saves the code to infooptions.php, which is accessible via a direct request...

CVE-2006-4632

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 groupe parameter in addmembre.php and the 2 select parameter in moveto.php...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

CVE-2006-4631

Direct static code injection vulnerability in admin/saveopt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cacheforum parameter, which saves the code to infooptions.php, which is accessible via a direct request...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

CVE-2006-4632

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 groupe parameter in addmembre.php and the 2 select parameter in moveto.php...

EUVD-2006-4621

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

CVE-2006-4631

The CVE refers to SoftBB 0.1 (and possibly earlier) with a vulnerability in admin/save_opt.php: Direct static code injection allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php and makes it accessible v...

CVE-2006-4633

SoftBB 0.1 is affected; index.php can disclose installation path via a null/invalid page[] parameter. The root cause is improper handling of the page[] input leading to information disclosure. Impact is partial confidentiality leakage (installation path). No remediation details are provided in th...

CVE-2006-4632

CVE-2006-4632 covers multiple SQL injection vulnerabilities in SoftBB 0.1 (and possibly earlier). Affected components/functions include addmembre.php (parameter: groupe) and moveto.php (parameter: select). The underlying issue is improper handling of untrusted input, enabling remote attackers to ...

CVE-2006-4631: Undefined Security Weakness

Direct static code injection vulnerability in admin/saveopt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cacheforum parameter, which saves the code to infooptions.php, which is accessible via a direct request...

CVE-2006-4632: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 groupe parameter in addmembre.php and the 2 select parameter in moveto.php...

CVE-2006-4633: Undefined Security Weakness

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

softbbxss.txt

SoftBB v0.1 alert'hacking%20xss' ; Greetz : M.I.D.TDrackanZ, Mr.IlysS & All Moroccan & Arab Hackers ;...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4593

Cross-site scripting XSS vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-4593

CVE-2006-4593 describes a Cross-site scripting vulnerability in SoftBB 0.1 and earlier. The vulnerability occurs in index.php and is exploitable via the page parameter, allowing injection of arbitrary script/HTML. Connected sources corroborate SoftBB XSS details (versions