42 matches found
jaxultrabb-lfixss.txt
=============================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
jaxultrabb 2.0 - Local File Inclusion / Cross-Site Scripting
=============================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
JaxUltraBB <= 2.0 (LFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...
jaxultrabb 2.0 - Local File Inclusion Cross-Site Scripting
jaxultrabb 2.0 - Local File Inclusion Cross-Site Scripting =============================================================== JaxUltraBB = 2.0 LFI/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
CVE-2007-3584
SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter...
CVE-2007-3584
The CVE-2007-3584 issue affects PNphpBB2 1.2i and earlier used with Postnuke, where the viewforum.php component is vulnerable to SQL injection via the order parameter. The underlying cause is improper input handling in the viewforum.php code, enabling remote attackers to craft SQL statements and ...
PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit
No description provided by source. / i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 = 1.2i current last version i Bug discovered by: Coloss i Exploit by: Coloss i Date: 03.07.2007 Notes - You need at least 2 posts in the forum. - Thank...
PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection
/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...
PNphpBB2 <= 1.2i viewforum.php Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42...
Sql injection
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...
Design/Logic Flaw
SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...
CVE-2006-2951
Multiple cross-site scripting XSS vulnerabilities in Net Portal Dynamic System NPDS 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the 1 Titlesitename or 2 sitename parameter to a header.php, 3 nukeurl parameter to b meta/meta.php, 4 forum parameter to c...
CVE-2006-2951
CVE-2006-2951 concerns multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS)
CVE-2005-4612
VULNERABILITY SUMMARY (CVE-2005-4612) : The affected software is VUBB alpha rc1. It contains multiple SQL injection vulnerabilities in three entry points: viewforum.php (parameter f), viewtopic.php (parameter t), and usercp.php (parameter view). The underlying issue is improper handling of user-s...
CVE-2005-4642
Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection
PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before...
CVE-2005-2323
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the following parameters: (1) id in viewattach.php, (2) viewuser_id in users.php, and (3) id or (4) forum in viewforum.php. Affecte...
CVE-2005-1616
CVE-2005-1616 concerns Ultimate PHP Board (UPB). The connected docs show that UPB versions up to 1.9.6 (i.e.,
CVE-2005-1614
Cross-site scripting XSS vulnerability in viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter...
CVE-2005-1615
viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability...