vBulletin - LAST.php SQL Injection

vBulletin - LAST.php SQL Injection Example: http://www.example.com/last.php?fsel=,user.password%20as%20title,user.%20%20%20%20username%20as%20lastposter%20FROM%20user,thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT%201 milw0rm.com 2004-11-15...

vBulletin LAST.PHP SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== vBulletin LAST.PHP SQL Injection Vulnerability ============================================== Example:...

vBulletin - 'LAST.php' SQL Injection

Example: http://www.example.com/last.php?fsel=,user.password%20as%20title,user.%20%20%20%20username%20as%20lastposter%20FROM%20user,thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT%201 milw0rm.com 2004-11-15...

phpbugtraq.txt

| | | | | \ | | | || | | | | | | | | |/ \ \ /\ / / | | | / | '| |/ / | | | | \ V V / | |/ / | | | | | |// // |/ ,|| ||\ http://www.howdark.com ---------------------------------------------------------------------------------------------------------------------------------- // Information...

TIPS MailPost 5.1.1 - Error Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/11598/info MailPost is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data and can allow an attacker to execute arbitrary HTML and script code in a user's browser throug...

W-Agora 4.1.6a - 'subscribe_thread.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these vulnerabilities to carry out SQL injection, cross-site scripting, a...

W-Agora 4.1.6 - a forgot_password.php?userid Cross-Site Scripting

W-Agora 4.1.6 - a forgotpassword.php?userid Cross-Site Scripting source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these...

W-Agora 4.1.6a - subscribe_thread.php HTTP Response Splitting

W-Agora 4.1.6a - subscribethread.php HTTP Response Splitting source: https://www.securityfocus.com/bid/11283/info Multiple vulnerabilities are reported to affect the application. These issues arise due to insufficient sanitization of user-supplied data. A remote attacker may leverage these...

PD9 Software MegaBBS 2.02.1 - ladder-log.asp Multiple SQL Injections

PD9 Software MegaBBS 2.02.1 - ladder-log.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP...

PD9 Software MegaBBS 2.0/2.1 - 'view-profile.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

PD9 Software MegaBBS 2.0/2.1 - 'thread-post.asp' Multiple Header CRLF Injections

source: https://www.securityfocus.com/bid/11253/info MegaBBS is reported prone to multiple vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data and may allow an attacker to carry out HTTP response splitting and SQL injection attacks. MegaBBS versions 2.0 and...

OpenCA Security Advisory: Cross Site Scripting vulnerability

OpenCA Security Advisory: Cross Site Scripting vulnerability Authors Martin Bartosch [email protected] Michael Bell [email protected] 2004-09-01 Initial revision 2004-09-06 Public release Summary ------- The OpenCA Project is a collaborative effort to develop a robust, full-feature...

TorrentTrader 1.0 RC2 SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================== TorrentTrader 1.0 RC2 SQL Injection Exploit =========================================== !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com...

webapp.traversal.txt

WebAPP is advertised as the internet's most feature rich, easy to run PERL based portal system. Its home site is at http://www.web-app.org/ Some features are : -Easy to Install on standard Unix servers! Windows user-supported only! -User Profiles -Message forums -Private messaging between members...

AntiBoard 0.60.7 - antiboard.php?feedback Cross-Site Scripting

AntiBoard 0.60.7 - antiboard.php?feedback Cross-Site Scripting source: https://www.securityfocus.com/bid/10821/info Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a...

Layton Technology HelpBox 3.0.1 - Multiple SQL Injections

Layton Technology HelpBox 3.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/10776/info It is reported that HelpBox is susceptible to multiple SQL injection vulnerabilities. This issue is due to improper sanitization of user-supplied data. These problems present themselves...

Outblaze Webmail - HTML Injection

Outblaze Webmail - HTML Injection source: https://www.securityfocus.com/bid/10756/info Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content. An attacker may be able to inject HTML and script code...

Gattaca Server 2003 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10731/info Gattaca Server 2003 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the...

Jaws 0.20.3 - gadget Traversal Arbitrary File Access

Jaws 0.20.3 - gadget Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/10670/info JAWS is reported prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: JAWS is...

12Planet Chat Server 2.9 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10659/info It is reported that 12Planet Chat Server is prone to a cross-site scripting vulnerability. This issue is due to a lack of sanitization of user-supplied data. The problem presents itself when malicious HTML or script code is passed in a URI...