466 matches found
Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection
126 $resul...
CVE-2006-5509
Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter...
CVE-2006-5508
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via 1 the n parameter and 2 the User-Agent HTTP header...
CVE-2006-5509
The CVE concerns WoltLab Burning Book 1.1.2, where an eval injection vulnerability in addentry.php allows remote code execution. The issue arises when crafted POST data stores PHP code in the database, which is later processed by eval. The exploitation path is demonstrated via SQL injection throu...
CVE-2006-5508
Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via 1 the n parameter and 2 the User-Agent HTTP header...
CVE-2006-5508
The CVE-2006-5508 entry relates to WoltLab Burning Book 1.1.2, where multiple SQL injection vulnerabilities exist in addentry.php. The root cause is improper handling of input in the addentry functionality, allowing attackers to craft requests via the n parameter and the User-Agent HTTP header to...
WoltLab-bb-1.1.2.txt
Hello bugtraq, ShAnKaR sec at shankar.antichat.ru reports multiple vulnerabilities in WoltLab Burning Book. Original message in Russian is available from http://www.security.nnov.ru/Odocument711.html Short translation: Author: ShAnKaR sec at shankar.antichat.ru Vendor: woltlab.de Tested version:...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
Exploit for unknown platform in category web applications ============================================================== WoltLab Burning Book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC
No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; die"use ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n" if !$ARGV0;$ARGV1=''...
многочисленные уязвимости в WoltLab Burning Book <=1.1.2
сайт прозводителя: woltlab.de уязвима версия 1.1.2 и возможно более раннии уязвимость носит критический характер файл addentry.php движка содержит код: whilelist$key,$val=each$POST $$key=$val; данные переданные методом POST не проверяются, в результате чего имеется возможность подменить глобальны...
WoltLab Burning Book 1.1.2 - SQL Injection
WoltLab Burning Book 1.1.2 - SQL Injection !/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
WoltLab Burning Book 1.1.2 - SQL Injection
!/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...
CVE-2006-5029
SQL injection vulnerability in thread.php in WoltLab Burning Board wBB 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3...
CVE-2006-5029
SQL injection vulnerability in thread.php in WoltLab Burning Board wBB 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3...
CVE-2006-5029
The CVE-2006-5029 entry describes an SQL injection in thread.php of WoltLab Burning Board (wBB) 2.3.x, allowing remote attackers to obtain the PHP, MySQL, and wBB version numbers via the page parameter. The report notes the issue may be a forced SQL error and that the original report was disputed...
Woltlab Burning Board 2.3.X SQL Injection Vulnerability
Use it like this: http://127.0.0.1/wbb2/thread.php?threadid=1&page=-1 Ok, its kinda useless 'cause it's an "ORDER BY", but u can see: - the PHP Version - the MySQL version - the wBB Version when it has been faked or removed Greets, 666 - www.sr-crew.de.tt...
CVE-2006-4317
Cross-site scripting XSS vulnerability in attachment.php in WoltLab Burning Board WBB 2.3.5 allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript...
CVE-2006-4317
CVE-2006-4317 affects WoltLab Burning Board (WBB) 2.3.5 in attachment.php. It is a cross-site scripting (XSS) vulnerability where a GIF image containing URL-encoded Javascript can be used to inject arbitrary script, with the impact described as partial confidentiality/integrity/availability in th...
CVE-2006-4317
Cross-site scripting XSS vulnerability in attachment.php in WoltLab Burning Board WBB 2.3.5 allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript...
WoltLab Burning Board 2.3.5(WBB) in XSS
Hi WBB in XSS We aren't able to bite from the Avatar ,But attachment.php With xss code are able to bite. HEX editor With GIF picture Open , JS code are writing. GIF89ajscode Js Code:Hex:...