ttforum Multiple Vulnerabilities

The remote host is running ttforum. This set of CGI is vulnerable to various attacks which may allow an attacker to execute arbitrary code on this host or gain administrative privileges on this forum. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 9 May 2003 16:58:36 -0000 From:...

ttCMS 2.2 ttForum 1.1 - news.php?template Remote File Inclusion

ttCMS 2.2 ttForum 1.1 - news.php?template Remote File Inclusion source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php...

ttcms and ttforum exploits

hope this is the right place to send this exploit info, I found three diffrent exploits for a forum software / cms software: ------------------------------------------------------------------------------------------------------------------------------------------------ Affected Product: ttCMS or...

ttCMS 2.2 ttForum 1.1 - install.php?installdir Remote File Inclusion

ttCMS 2.2 ttForum 1.1 - install.php?installdir Remote File Inclusion source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and...

ttCMS 2.2 / ttForum 1.1 - 'install.php?installdir' Remote File Inclusion

source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a...

ttCMS 2.2 / ttForum 1.1 - 'news.php?template' Remote File Inclusion

source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a...