132 matches found
Directory traversal
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. dot dot in the topic parameter...
CVE-2009-2600
Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. dot dot in the topic parameter...
CVE-2009-2600
CVE-2009-2600 describes multiple directory traversal vulnerabilities in Webboard 2.90 alpha/beta and earlier, where an attacker can read arbitrary files by supplying a two-dot sequence in the topic parameter of view.php. The affected software is Webboard (version 2.90 beta and earlier); the under...
Webboard <= v.2.90 beta Remote File Disclosure Vulnerability
No description provided by source. Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There...
Webboard 2.90 Beta File Disclosure
Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There are 3 vulnerable calls to fopen in...
212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal
source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to retrieve and read...
212Cafe WebBoard 2.90 Beta - Remote File Disclosure
Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends ============================================================= There are 3 vulnerable calls to fopen in...
212Cafe WebBoard 2.90 Beta - Remote File Disclosure
212Cafe WebBoard 2.90 Beta - Remote File Disclosure Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================= Author: MrDoug Email: mrdoug13 at gmail dot com Greetz to all my friends...
Webboard <= v.2.90 beta Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ============================================================ Webboard = v.2.90 beta Remote File Disclosure Vulnerability ============================================================ Webboard = v.2.90 beta Remote File Disclosure Vulnerabili...
212Cafe WebBoard 2.90 Beta - view.php Directory Traversal
212Cafe WebBoard 2.90 Beta - view.php Directory Traversal source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with...
CVE-2009-0703
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0703
SQL injection vulnerability in bview.asp in ASPThai.Net Webboard 6.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-0703
CVE-2009-0703 : SQL injection in bview.asp of ASPThai.Net Webboard 6.0 allows remote SQL execution via the id parameter . Affected component: bview.asp; root cause: improper input handling enabling SQL injection. Impact as per NVD: partial confidentiality, partial integrity, partial availability....
CVE-2008-5956
Wbstreet aka PHPSTREET Webboard 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc...
CVE-2008-5956
Wbstreet aka PHPSTREET Webboard 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc...
CVE-2008-5955
CVE-2008-5955 affects Wbstreet (aka PHPSTREET Webboard) 1.0. The vulnerability is an SQL injection in show.php via the id parameter, allowing remote attackers to craft SQL commands. This is the stated root cause: unsanitized input in the id parameter leading to arbitrary SQL execution. Public ref...
CVE-2008-5956
CVE-2008-5956 affects Wbstreet (PHPSTREET Webboard) 1.0. The root cause is improper access control that leaves sensitive data under the web root, enabling remote attackers to retrieve database credentials by requesting connect.inc directly. Public references note that the issue has exploitable ch...