wwwThreads - calendar.php Cross-Site Scripting

wwwThreads - calendar.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19177/info WWWThreads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

wwwThreads - 'calendar.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19177/info WWWThreads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the conte...

Sql injection

Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...

CVE-2006-1958

Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...

CVE-2006-1958

Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...

CVE-2006-1958

CVE-2006-1958 involves multiple SQL injection vulnerabilities in WWWThreads RC 3. The two attack vectors are (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php, allowing remote attackers to execute arbitrary SQL commands. The CVE description indicates ...

CVE-2002-0223

CVE-2002-0223 affects Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9. The vulnerability allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends with a different, non-accepted extension. The issue is a fi...

Несанкционированный доступ в WWWThreads и UBBThreads (unauthorized access)

Можно загрузить запрещенный тип файлов...

[ WWWThreads, UBBThreads ] Security Hole in upload system

WWWThreads, UBBThreads Security Hole in upload system Author: RootExtractor, CompuMe [email protected], [email protected] I. Details II. Vulnerable ver's III. Example, Xploit IV. Solution Details : ..: config.inc.php :.. ------------------------- snip ------------------------------ //...

CVE-2000-0125

CVE-2000-0125 concerns wwwthreads where numeric data and table names passed to SQL queries are not properly sanitized. The underlying cause is improper input handling in SQL construction, enabling an unauthenticated, remote attacker to gain privileges on the wwwthreads forums. The available recor...

CVE-2000-0125

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums...

CVE-2000-0125

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums...

Wired Community Software WWWThreads 5.0 - SQL Command Input

Wired Community Software WWWThreads 5.0 - SQL Command Input source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulat...

Wired Community Software WWWThreads 5.0 - SQL Command Input

source: https://www.securityfocus.com/bid/967/info WWWThreads is a web bulletin board program that uses an SQL backend. Due to incomplete input validation, it is possible for an attacker to submit SQL commands through forms and manipulate the contents of the database to gain administrator...

rfp2k01.txt

-- Advisory RFP2K01 ------------------------------ rfp.labs ------------ "How I hacked PacketStorm" A look at hacking wwwthreads via SQL ------------------------------- rain forest puppy / [email protected] --- Table of contents: -1. Scope of problem -2. Long explaination of SQL hacking -3. Soluti...