MyBB 1.6.2 Cross Site Scripting

MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XSS code as the title any user with any level of...

Midterm Election Buzz Fuels Rogue AV Attacks

Interest in the U.S. midterm elections is being used to lure Web surfers to malicious Web pages that are pushing rogue antivirus programs, according to security firm Websense. With voter interest running high in the U.S., Web searches for hot terms like “midterm election polls,” “2010 midterm...

Ebits Online SQL injection and upload vulnerabilities-vulnerability warning-the black bar safety net

Ebits Online program exist two vulnerabilities, the weddingtopics. php page the filter is not carefully generatedSQL injectionattack uploadimages. php page in you can upload any file. SQL injection: = SQL injectionstatement For example: -- Upload vulnerability: Official address: Note: author: iMe...

Moscow Bombings, TJX Hacker Spur Black Hat Campaigns

Spammers and malware writers have wasted no time in taking advantage of Monday’s bombings in Moscow, opening up a campaign on Twitter to point users to malicious sites. The pair of suicide bombings that hit the Metro system in Moscow Monday morning inevitably led to a flood of messages on Twitter...

Search Engine Poisoning Is On the Rise

To improve the chances of installing their malware on random computers, scareware peddlers have decided to set up more that 60 websites that contain hundreds of possible search matches for hot, trending topics. Read the full article. Help Net Security...

Tips for Avoiding Malware on Social Networks Include More than Common Sense

Amid all the malware on Facebook, Twitter, Bit.ly and other social networks and microblogs, there are some new tips and strategies on how to avoid being hijacked. The article describes a number of methods including the hijacking of Twitter trending topics and hijacking legitimate Twitter accounts...

Scareware Scammers Hijack Twitter Trending Topics

Security researchers are reporting on an ongoing scareware serving campaign abusing the popular micro-blogging service Twitter. Hundreds of tweets using four different URL shortening services are currently spammed through the automatically registered Twitter accounts, relying on a pseudo-random...

Google Internet Summit 2009: Security Session

Whitfield Diffie, the inventor of public-key cryptography, moderates a panel of security experts, including Howard Schmidt, Steve Crocker, Chris DiBona and Eric Grosse, discussing a variety of security topics...

KerviNet Forum 1.1 SQL Injection / XSS

dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...

Cybercriminals hijack Twitter trending topics to serve malware

From ZDNet Dancho Danchev A currently ongoing malware attack across Twitter is abusing the momentum offered by Twitter’s trending topics in order to trick users into visiting bogus exclusive video sites and infect them with malware. The campaign, spreading since last week, is relying on a growing...

Seo4SMF for SMF forums Multiple Vulnerabilities

No description provided by source. 1 Inyection SQL Linea 50 al 63 $query = dbquery" SELECT m.IDTOPIC, m.subject ,b.IDBOARD, b.name FROM $dbprefixmessages AS m, $dbprefixboards AS b WHERE m.IDTOPIC = $topic AND m.IDBOARD = b.IDBOARD IMIT 1", FILE, LINE;...

webSPELL 4.01.02 - id Remote Edit Topics

webSPELL 4.01.02 - id Remote Edit Topics +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos -...

webSPELL 4.01.02 - 'id' Remote Edit Topics

+=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos - stakerathotmaildotit | magic quotes 0 | |...

CVE-2008-5270

SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...

CVE-2008-5270

SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...

MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== MyPHP Forum = 3.0 Edit Topics/Blind SQL Injection Vulnerabilities ================================================================== /...

MyPHP Forum 3.0 - Edit Topics Blind SQL Injection

MyPHP Forum 3.0 - Edit Topics Blind SQL Injection / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------...

MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection

/ ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...

CVE-2008-4614

PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...

CVE-2008-4076

CVE-2008-4076 is an XSS vulnerability affecting multiple Tor World CGI-based products (Tor Board 1.3 and earlier; Topics BBS 1.11 and earlier; Simple BBS 1.86 and earlier; Interactive BBS 1.57 and earlier). Public sources describe an ability for remote attackers to inject arbitrary script/HTML in...