1660 matches found
vBulletin 5 - index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
vBSEO <= 3.6.0 "proc_deutf()" Remote PHP Code Injection Exploit
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'vBSEO = 3.6.0 procdeutf Remote PHP Code Injection', 'Description' = %q This module exploits a vulnerability in...
vBulletin 4.0.2 Search Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38895/info vBulletin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
vBulletin Yet Another Awards System 4.0.2 - SQL Injection
No description provided by source. Exploit Title: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day Google Dork: inurl:awards.php intext:powered by vbulletin Date: 29/08/12 Exploit Author: Backsl@sh/Dan Software Link: http://www.vbulletin.org/forum/showthread.php?t=232684...
vBulletin 4.0.2 Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/38339/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the...
VBulletin <= 3.6.6 Calendar.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24020/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
vBulletin <= 3.0.4 "forumdisplay.php" Code Execution (part 2)
No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...
vBulletin 4.0.x => 4.1.2 - (search.php) SQL Injection Vulnerability
No description provided by source. ==================================================================== vBulletin 4.0.x = 4.1.2 search.php SQL Injection Vulnerability ==================================================================== 888 d8 888 888 ,d d8 e88\888 d88 888-\ 888 e 888-88e ,d888 d8...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/language.php goto Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
vBulletin 4.0.8 PL1 XSS Filter Bypass within Profile Customization
No description provided by source. Exploit Title: vBulletin 4.0.8 PL1 - XSS Filter Bypass within Profile Customization Google Dork: Powered by vBulletin Version 4.0.8 -vBulletin.com is now powered by Date: 20th November 2010 Author: MaXe Software Link: Commercial software. Version: 4.0.8 PL1...
vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability
No description provided by source. Exploit Title: vBulletin ChangUonDyU Advanced Statistics - SQL Injection Vulnerability Google Dork: No Dork Date: 19/10/2012 Exploit Author: Junookyo Vendor Homepage: http://hoiquantinhoc.com Software Link:...
VBulletin 1.0.1 lite/2.x/3.0 /admincp/user.php email Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...
vBulletin Adsense Component 'viewpage.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
vBulletin <= 3.7.1 Moderation Control Panel 'redirect' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied input. An attacker may leverage this...
vBulletin vBay <= 1.1.9 - Error-Based SQL Injection
No description provided by source. !/usr/bin/env python -W ignore::DeprecationWarning VBay = 1.1.9 - Remote Error based SQL Injection Author: Dan UK Contact: http://www.hackforums.net/member.php?action=profile&uid=817599 Date: 10/11/12 DETAILS Among a couple of other unsanitized parameters used...
VBulletin 2.0/2.2.x Memberlist.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6226/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which...
vBulletin <= 3.5.4 Multiple Cross Site Scripting Vulnerabilities
No description provided by source...
vBulletin <= 3.0.6 php Code Injection
No description provided by source. Tested on vBulletin Version 3.0.1 /str0ke http://www.xxx.net/misc.php?do=page&template=$systemid SCAN Associates Security Advisory http://www.scan-associates.net Proof of concept ================ http://site.com/misc.php?do=page&template=$phpinfo milw0rm.com...
VBulletin 3.5.x/3.6.x SWF Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21736/info vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application. If exploited, this vulnerability may let attackers steal cookie-based authentication...
vBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28 - SQL Injection
No description provided by source. Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: Powered by vBulletin? Version 5.0.0 Beta Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE :...