CVE-2011-2939

Off-by-one error in the decodexs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service memory corruption via a crafted Unicode string, which triggers a heap-based buffer overflow...

GLSA-200908-07 : Perl Compress::Raw modules: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200908-07 Perl Compress::Raw modules: Denial of Service Leo Bergolth reported an off-by-one error in the inflate function in Zlib.xs of Compress::Raw::Zlib, possibly leading to a heap-based buffer overflow CVE-2009-1391. Paul...

CVE-2009-1884

Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to...

Buffer overflow

Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to...

CVE-2009-1884

Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service application hang or crash via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to...

CVE-2009-1884

CVE-2009-1884 is an off-by-one / buffer overflow issue in the bzinflate function of Perl's Compress-Raw-Bzip2 (Bzip2.xs) in the Compress-Raw-Bzip2 module prior to 2.018. This can allow a context-dependent attacker to trigger a denial of service (hang or crash) via a crafted bzip2 stream. Connecte...

CVE-2008-1512

CVE-2008-1512 affects the eXtreme Styles (XS-Mod) for phpBB, specifically XS-Mod versions 2.3.1 and 2.4.0. The vulnerability is a directory traversal in admin/admin_xs.php that allows remote attackers to include and execute arbitrary files by manipulating the phpEx parameter (using ..). The issue...

CVE-2008-1512

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...

phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability

No description provided by source. ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

phpBB Module XS-Mod 2.3.1 - Local File Inclusion

phpBB Module XS-Mod 2.3.1 - Local File Inclusion ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%...

phpBB Module XS-Mod 2.3.1 - Local File Inclusion

..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability ============================================================...

phpbbxsmod-lfi.txt

..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

Cross site scripting

Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...

CVE-2007-5033

Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...

CVE-2007-5033

The provided data confirms CVE-2007-5033 is an XSS vulnerability in profile.php of phpBB XS 2. The flaw allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profile_info editprofile action. Affected component: profile.php in phpBB XS 2; root cause: insuffi...

CVE-2007-5033

Cross-site scripting XSS vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the selfdes parameter in a profileinfo editprofile action...

phpbb-permxss.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...

Low: mod_perl security update

1.9916-4.5 - avoid backup files in install root 241643 1.9916-4.3 - fix XS generation of methodislimited 242430 1.9916-4.2 - rebuild 1.9916-4.1 - add security fix for CVE-2007-1349 241643...

phpBB XS bb_usage_stats.php远程文件包含漏洞

phpBB XS是一款基于PHP的论坛程序。 phpBB XS在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpBB XS的bbusagestats/includes/bbusagestats.php脚本没有正确验证phpbbrootpath参数的输入数据，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。bbusagestats.php中漏洞代码如下： line 24 include$phpbbrootpath...