1047 matches found
Sql injection
SQL injection vulnerability in the News module in modules.php in Envolution 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2005-4263...
Sql injection
SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter...
boastmachine-session.txt
Vagrant - E-hack.org 05.22.2007 BoastMachine v3.0 platinum - Session Ýd Hacking After the login into the site which alllows new user registration. Site user's data which is entered to change the topic, can be changed by another user, and that is a security hole because of ID interchangeability in...
CVE-2007-1503
Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...
CVE-2007-1503
Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...
CVE-2007-1163
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, CVE-2006-5388, and CVE-2006-4783...
Sql injection
SQL injection vulnerability in printview.php in webSPELL 4.01.02 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter, a different vector than CVE-2007-1019, CVE-2006-5388, and CVE-2006-4783...
BtitTracker 1.4 XSS
BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...
AdamIsmayPrintTopicModSQL注入漏洞 Exploit
No description provided by source. Bartek Nowotarski （[email protected]）提供了如下测试方法：...
phpbbarchive-rfi.txt
!/usr/bin/perl pbpbb archive for search engines Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mambopower.net/ http://www.mambopower.net/downloads/phpbbsearchindexer.zip use IO::Socket; use LWP::Simple;...
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ Hacking Security | | | | / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
Exploit for unknown platform in category web applications =============================================================== phpBB Admin Topic Action Logging Mod | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging Fo...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site:...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x -...
CVE-2006-3096
CVE-2006-3096: Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL via user-controlled input in (1) the forum parameter in messagepost.cfm and (2) the topic parameter in topics.cfm. Root cause described as improper handling of inp...
Sql injection
SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...
CVE-2006-2904
SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...
View Topic Flood phpBB, MercuryBoard, Vbulletin, Ipb
Author: SpiderZ Exploit: http://spiderz.netsons.org/exploit/10.txt...
CVE-2006-2204
CVE-2006-2204 affects Invision Power Board 2.1.5, where the topic deletion code (post_delete in func_mod.php) is vulnerable to SQL injection. The vulnerability arises when the selectedpids parameter is used with $id as an array, bypassing an integer value check and allowing remote authenticated m...