Authentication flaw

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1...

CVE-2008-4333

Summary (CVE-2008-4333): The vulnerability is a cross-site scripting (XSS) flaw in the PHP infoBoard V.7 Plus product, exploitable via the isname parameter in a newtopic action. This allows remote attackers to inject arbitrary web script or HTML. The affected component is the topic creation path ...

CVE-2008-4332

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php...

CVE-2008-4332

CVE-2008-4332 affects PHP infoBoard V.7 Plus. The vulnerability is an SQL injection in the showjavatopic function (func.php) that allows an attacker to manipulate SQL via the idcat parameter to showtopic.php. This could enable arbitrary SQL execution, depending on the database permissions. The co...

CVE-2008-4334

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1...

CVE-2008-4334

The CVE-2008-4334 issue affects PHP infoBoard V.7 Plus, where remote attackers can bypass authentication and gain administrative access by setting the infouser cookie to 1. This is described across multiple sources (NVD, CVE records, and related databases). The available documents do not provide ...

CVE-2008-4333

Cross-site scripting XSS vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action...

PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities

No description provided by source. ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

phpinfoboard-sqlxss.txt

========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PHP infoboard 7 plus - Multiple Vulnerabilities

PHP infoboard 7 plus - Multiple Vulnerabilities ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

phpinfoboard-cookie.txt

PHP infoBoard V.7 Plus Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "infouser=1; path=/"; document.cookie = "infopass=1; path=/";...

wcms-sql.txt

======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

wcms-admin.txt

!/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------...

WCMS v.1.0b Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ======================================= WCMS v.1.0b Arbitrary Add Admin Exploit ======================================= !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit...

phpsmartcom 0.2 - Local File Inclusion SQL Injection

phpsmartcom 0.2 - Local File Inclusion SQL Injection fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

FreeBSD Security Advisory (FreeBSD-SA-04:02.shmat.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:02.shmat.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

gallery-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE Author: r45c4l...

linux/x86 shellcode generator / null free

No description provided by source. / BlackLight's shellcode generator for Linux x86 Tested anywhere, working & NULL-free Usage: ./generator cmd ...and then you've got a ready2inject NULL-free shellcode for the command you like copyleft 2008 by BlackLight blacklightatautistici.org...

bookmarks-sql.txt

|| | | Bookmarks V 1.1.02 id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://lbstone.com/apb/?version=1.1.02 | | DorK : Powered by Active P...