132 matches found
How2ASP.net WebBoard 4.1 - SQL Injection
How2ASP.net WebBoard 4.1 - SQL Injection ========================================================== How2ASP.net Webboard 4.1 Remote SQL Injection Vulnerability ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
CVE-2008-1941
Cross-site scripting XSS vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field. NOTE: the provenance of this information is unknown; the details are obtained solely from...
Cross site scripting
Cross-site scripting XSS vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2008-1941
Cross-site scripting XSS vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2008-1941
CVE-2008-1941 describes a cross-site scripting (XSS) vulnerability in the profile update feature of Akiva WebBoard 8.0. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the update form field, due to inadequate input handling. The affect...
Sql injection
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter...
CVE-2008-1039
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter...
CVE-2008-1039
The vulnerability is a SQL injection in PORAR WEBBOARD’s web interface. Specifically, a weakness in the file/endpoint associated with question.asp allows remote attackers to inject arbitrary SQL through the QID parameter, enabling potentially unauthorized database access or manipulation as descri...
CVE-2008-1039
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID parameter...
PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability
No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability &n...
PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ PORAR WEBBOARD question.asp Remote SQL Injection Vulnerability ================================================================ CoRPITX Turkey www.Hayalet-hack.com...
PORAR WebBoard - question.asp SQL Injection
PORAR WebBoard - question.asp SQL Injection CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk...
porarwebboard-sql.txt
CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...
PORAR WebBoard - 'question.asp' SQL Injection
CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...
212cafe Webboard Read.PHP SQL注入漏洞
212cafe Webboard是一款基于PHP的WEB应用程序。 212cafe Webboard不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'Read.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 212Cafe Webboard 6.30 Beta 目前没有解决方案提供： http://www.212cafe.com/ http://www.example.com/Board/read.php?id=SQL...
212Cafe WebBoard 6.30 - Read.php SQL Injection
212Cafe WebBoard 6.30 - Read.php SQL Injection source: https://www.securityfocus.com/bid/25526/info 212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...
212Cafe WebBoard 6.30 - 'Read.php' SQL Injection
source: https://www.securityfocus.com/bid/25526/info 212cafe Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
Unfixed XSS vulnerability at www.cdd.go.th
Security researcher Narcoticxs, has submitted on 23/07/2007 a cross-site-scripting XSS vulnerability affecting www.cdd.go.th, which at the time of submission ranked 56348 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/08/2007. It is current...
SIX-webboard does not adequately validate user input thereby permitting directory traversal
Overview SIX-webboard does not adequately validate user input, allowing directory traversal. Description SIX-webboard 2.01 does not adequately validate the "content" CGI variable, allowing directory traversal out of SIX-webboard's content root directory. Attackers may exploit this vulnerability t...