23 matches found
EUVD-2006-4439
Malware in sbrugna...
EUVD-2006-4784
Malware in sbrugna...
EUVD-2008-6284
Malware in sbrugna...
Mensajeitor Tag Board 1.x Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10774/info It has been reported that Mensajeitor Tag Board is affected by an authentication bypass vulnerability. This issue is due to a failure of the application to properly handle authentication controls. Successful...
CJ Tag Board V3.0 <= Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: CJ Tag Board V3.0 http://localhost/PaTh/details.php?name=Dr.NaNo |2|- Cross Site Request Forgery : ThankS !Dr.NaNo - Exploit-db Go To = http://localhost/PaTh/ipban.php xD: |3|- Information Disclosure : == This Information All...
Sql injection
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6314
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
CVE-2008-6314
SQL injection vulnerability in tagboard.php in the Tag Board module 4.0 and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter in a delete action...
phpBB 3 / Mod Tag Board 4 Blind SQL Injection
!/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board get$host.injection$i,$chars$j; $time2 = time; if$time2 - $time1 6 syswriteSTDOUT,chr$chars$j; $hash .= chr$chars$j; last; if$i == 1 && length $...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit http://bx67212.netsons.org/forum/viewforum.php?f=3...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit =============================================================== !/usr/bin/perl...
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
phpBB 3 - Mod Tag Board 4 Blind SQL Injection !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board get$host.injection$i,$chars$j; $time2 = time; if$time2 - $time1 6 syswriteSTDOUT,chr$chars$j;...
phpBB 3 - Mod Tag Board 4 Blind SQL Injection
!/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board get$host.injection$i,$chars$j; $time2 = time; if$time2 - $time1 6 syswriteSTDOUT,chr$chars...
CJ Tag Board User-Agent PHP注入漏洞
CJ Tag Board是一款基于PHP的论坛程序。 CJ Tag Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题一是tag.php脚本对"User-Agent" HTTP头数据缺少过滤，可导致任意PHP代码注入，并通过请求all.php脚本执行。 问题二是adminindex.php脚本对用户提交的"banned"参数缺少过滤，可导致任意PHP代码注入。 CJ Tag Board 3.0 http://www.scriptsearch.com/cgi-bin/jump.cgi?ID=10068...
MensajeitorTagBoard验证绕过漏洞
Mensajeitor Tag Board是一款基于WEB的论坛程序。Mensajeitor Tag Board的验证机制存在问题，远程攻击者可以利用这个漏洞绕过COOKIE验证，未授权进行访问。其使用的验证代码如下： for$i=0;$icount$NicksRegs;$i++ list$adminnick,$adminpass = explode":",$NicksRegs$i; if $nick == $adminnick $cadenafinal .= "span class="admin"".$nick."/span"; $AdminNick = "si"; if...
CJ Tag Board PHP远程代码注入漏洞
CJ Tag Board是一款简单易用的网站管理脚本。 CJ Tag Board中存在两个输入验证错误，可能允许恶意攻击者完全入侵有漏洞的系统： 1 在存储前没有正确过滤对tag.php中User-Agent HTTP头的输入，允许注入任意PHP代码。当用户请求all.php脚本时就会执行这些代码。 2 在存储前没有正确过滤对adminindex.php中banned参数的输入，允许注入任意PHP代码。但利用这个漏洞需要管理用户权限。 CJ Website Design CJ Tag Board 3.0...
CVE-2006-4797
Cross-site scripting XSS vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter...
CVE-2006-4797
CVE-2006-4797 describes a cross-site scripting (XSS) vulnerability in CloudNine Interactive CJ Tag Board 3.0 . The flaw occurs in the tag.php handler, where an attacker can inject arbitrary web script or HTML by abusing a JavaScript event in a url BBcode tag within the cjmsg parameter. This is a ...
[eVuln] CJ Tag Board XSS Vulnerability
New eVuln Advisory: CJ Tag Board XSS Vulnerability http://evuln.com/vulns/137/summary.html --------------------Summary---------------- eVuln ID: EV0137 Vendor: CloudNine Interactive Vendor's Web Site: http://www.cloudnineinteractive.co.uk/ Software: Tag Board Sowtware's Web Site:...
CVE-2006-4451
Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...