CVE-2008-3061

Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...

CVE-2008-3061

CVE-2008-3061: Open redirect vulnerability in redirect.php of V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary sites via the to parameter, enabling phishing. Root cause: open redirect due to insufficient redirection validation. No patch/mitigation details are provided in the...

CVE-2008-3060

V-webmail version 1.5.0 is affected by CVE-2008-3060. The vulnerability arises from (1) malformed input on the login page (includes/local.hooks.php) and (2) an invalid session ID, both of which can cause error messages that reveal the installation path. This indicates a potential information disc...

CVE-2008-3063

SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3063

The CVE-2008-3063 entry documents a SQL injection vulnerability in V-webmail 1.5.0’s login.php, exploitable via the username parameter to allow remote execution of arbitrary SQL commands. Affected software: V-webmail 1.5.0 (login.php). Root cause: unsafely concatenated user input in the login rou...

CVE-2008-3060

V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...

CVE-2008-4334

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1...

Authentication flaw

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1...

CVE-2008-4332

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php...

CVE-2008-4333

Summary (CVE-2008-4333): The vulnerability is a cross-site scripting (XSS) flaw in the PHP infoBoard V.7 Plus product, exploitable via the isname parameter in a newtopic action. This allows remote attackers to inject arbitrary web script or HTML. The affected component is the topic creation path ...

CVE-2008-4334

The CVE-2008-4334 issue affects PHP infoBoard V.7 Plus, where remote attackers can bypass authentication and gain administrative access by setting the infouser cookie to 1. This is described across multiple sources (NVD, CVE records, and related databases). The available documents do not provide ...

CVE-2008-4332

CVE-2008-4332 affects PHP infoBoard V.7 Plus. The vulnerability is an SQL injection in the showjavatopic function (func.php) that allows an attacker to manipulate SQL via the idcat parameter to showtopic.php. This could enable arbitrary SQL execution, depending on the database permissions. The co...

CVE-2008-4333

Cross-site scripting XSS vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web script or HTML via the isname parameter in a newtopic action...

CVE-2008-4334

PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the infouser cookie to 1...

PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities

No description provided by source. ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

phpinfoboard-sqlxss.txt

========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

PHP infoboard 7 plus - Multiple Vulnerabilities

PHP infoboard 7 plus - Multiple Vulnerabilities ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

phpinfoboard-cookie.txt

PHP infoBoard V.7 Plus Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "infouser=1; path=/"; document.cookie = "infopass=1; path=/";...

WCMS v.1.0b Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ======================================= WCMS v.1.0b Arbitrary Add Admin Exploit ======================================= !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit...