CVE-2003-1258

activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...

EUVD-2005-3259

Malware in sbrugna...

EUVD-2003-1248

Malware in sbrugna...

EUVD-2005-3258

Malware in sbrugna...

CVE-2003-1258

The CVE-2003-1258 entry affects versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6. The vulnerability allows remote attackers to gain unauthorized administrative access by issuing a URL request with the uid parameter set to the webmaster uid, indicating an authentication/authorization bypass v...

CVE-2005-3259

Multiple SQL injection vulnerabilities in versatileBulletinBoard vBB 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 login field, 2 "search this thread" feature, 3 "search for posts" feature, 4 "forgot password" feature, 5 list parameter in...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3261

getversions.php in versatileBulletinBoard vBB 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-3261

CVE-2005-3261 affects versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerability is in getversions.php, which unintentionally lists the versions of all installed scripts and can be triggered by a direct remote request. This leads to information disclosure of installed components. The provided docu...

CVE-2005-3259

The CVE-2005-3259 entry concerns multiple SQL injection flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities affect several entry points and query parameters (including login, “search this thread,” “search for posts,” “forgot password,” and various index.php parameters such as lis...

[SA17174] versatileBulletinBoard Cross-Site Scripting and SQL Injection

TITLE: versatileBulletinBoard Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA17174 VERIFY ADVISORY: http://secunia.com/advisories/17174/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of system information WHERE: From...

versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit

No description provided by source. ?php --- versatilexpl.php 4.08 11/10/2005 versatileBulletinBoard 1.00 RC2 possibly prior versions SQL injection / board takeover this exploit describes the vulnerability described here: http://rgod.altervista.org/versatile100RC2.html with a change: with...

versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== versatileBulletinBoard 1.00 RC2 board takeover SQL Injection Exploit ====================================================================== ?php --- versatilexpl.php 4....

CVE-2003-1258

activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...