177 matches found
Philweb 1.02 SQL Injection
|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philweb v1.02 sql injection Vulnerability +===========================================================================|| Script : philweb v1.02 || ! Author : ViRuSHiMa || ! Site : WwW.hell-z0ne.org -...
philboard v1.02 sql injection Vulnerability
Exploit for unknown platform in category web applications =========================================== philboard v1.02 Sql Injection Vulnerability =========================================== + + |email protected SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql...
philboard 1.02 - SQL Injection
philboard 1.02 - SQL Injection + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site :...
philboard 1.02 - SQL Injection
|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site : WwW.hell-z0ne.org -...
Move the net Forum DvBBS boardrule. php module SQL injection vulnerability-vulnerability warning-the black bar safety net
Affected system: Move the net Forum Dvbbs php 2.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 3 6 2 8 2 DVBBS is a Aspsky. Net development and maintenance of open source ASP Web forum program. DvBBS does not properly filter user...
Simple Machines Forum < 1.1.8 Password Reset Function Bypass
Binary data 4813.prm...
Phorum admin.php3无需验证修改管理员口令漏洞
BUGTRAQ: 2271 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个问题，远程攻击者可以访问本地系统文件。 admin.php3脚本用于安全和管理被创建的论坛。它带有口令保护，但存在漏洞可以无需访问权限修改管理员口令。一旦拥有了管理功能的访问权限，就可以进入 Master Setting 功能，在 default .langfile name 输入框输入想要访问的系统本地文件，重新载入admin.php3页面后就可以浏览这个文件的内容了。 3.0.7 and...
Phorum violation.php3转发任意邮件漏洞
BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...
MyBB search.php文件跨站脚本执行漏洞
BUGTRAQ ID: 30401 CVECAN ID: CVE-2008-3334 MyBB是一款流行的Web论坛程序。 MyBB的search.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 MyBB 1.2.x MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.net/download/latest...
CVE-2006-5802
SQL injection vulnerability in messagedetails.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter...
MiniHTTPServer Web Forum绕过认证添加用户漏洞
Web Forum & File Sharing Server允许用户在Internet上创建自己的论坛。 Web Forum & File Server在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权操作论坛。 Web Forum & File Server的join.asp文件没有正确验证frmMailBox参数数据的输入，允许攻击者未经授权便以PowerUser的权限添加新的论坛用户。 Mini HTTP Server Web Forum & File Sharing Server 4.0...
CVE-2006-5597
CVE-2006-5597 affects MiniHTTP Web Forum & File Server PowerPack 4.0. The join.asp endpoint is vulnerable to remote manipulation of user accounts via modified parameters (1) frmMailBox and (2) frmUserPass), allowing an attacker to add or modify arbitrary accounts. The description and references i...
CVE-2006-5597
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified 1 frmMailBox and 2 frmUserPass parameters...
MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit
No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User
MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...
MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit
Exploit for unknown platform in category remote exploits =================================================================== MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit ===================================================================...
SoftBB多个远程代码执行及信息泄露漏洞
SoftBB是一款基于WEB的论坛程序。 SoftBB v0.1中存在多个输入验证错误，如下： 1 在SQL查询时没有正确的验证对/addmembre.php文件中groupe参数及/moveto.php文件中select参数的输入，允许攻击者执行SQL注入攻击。 2 在PHP脚本中存储之前没有正确过滤对admin/saveopt.php中多个参数的输入，允许攻击者执行任意PHP代码。成功攻击可能要求管理员权限。 3 对index.php中page参数的输入没有正确的处理空的或无效的参数，允许攻击者判断安装路径。 SoftBB = 0.1...
MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User
/================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with their join.asp page a malicious...
PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections
PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fai...
PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting
PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application...