213 matches found
Directory traversal
Directory traversal vulnerability in Yet another Bulletin Board YaBB 2.1 and earlier allows remote authenticated users to execute arbitrary Perl code via a .. dot dot in the userlanguage profile setting, which sets the userlanguage key of the member hash, and is propagated to the language variabl...
CVE-2007-3295
YaBB 2.1 and earlier suffer a directory traversal vulnerability where remote authenticated users can execute arbitrary Perl code by manipulating the userlanguage profile setting; the userlanguage key is propagated to language variables across multiple YaBB scripts (HelpCentre.pl, ICQPager.pl, Sub...
CVE-2007-3295
Directory traversal vulnerability in Yet another Bulletin Board YaBB 2.1 and earlier allows remote authenticated users to execute arbitrary Perl code via a .. dot dot in the userlanguage profile setting, which sets the userlanguage key of the member hash, and is propagated to the language variabl...
yabb-lfi.txt
Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB 1,640,000 clients 2. Local File Include I found many bugs like it in this board.Bugs relate one special variable for user$language, you can edit this variable in your profile. Examples, where I found bugs...
Local File Include Vulnerabilities in YaBB <= 2.1(all version)
Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB = 2.1all version Web page:http://www.yabbforum.com/ Credit:Maciej krasza Kukla @mail:[email protected] homepage:www.krasza.int.pl 1.Description "YaBB is a leading free forum software package that rivals an...
Crlf injection
CRLF injection vulnerability in Yet another Bulletin Board YaBB 2.1 allows remote attackers to obtain administrative access via requests to 1 register.pl or 2 profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code...
CVE-2007-3208
CRLF injection vulnerability in YaBB 2.1 allows remote attackers to obtain administrative access through requests to register.pl or profile.pl that write CRLF sequences to a .vars file; this may enable execution of arbitrary code. No patch/version details are provided in the supplied documents.
CVE-2007-3208
CRLF injection vulnerability in Yet another Bulletin Board YaBB 2.1 allows remote attackers to obtain administrative access via requests to 1 register.pl or 2 profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code...
[Full-disclosure] iDefense Security Advisory 06.12.07: YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability
YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability iDefense Security Advisory 06.12.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 12, 2007 I. BACKGROUND YaBB Yet another Bulletin Board is an Open Source community forum system written in Perl. More information...
YaBB SE <= 2.1 Multiple Script CRLF Injection Privilege Escalation
Binary data 4097.prm...
CVE-2006-5413
Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...
CVE-2006-5413
Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...
CVE-2006-5413
CVE-2006-5413 describes multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) . An attacker can cause arbitrary PHP code execution by providing a URL in the sourcedir parameter to one of four scripts: Offline.php, Sources/Admin.php, Sources/Offline.php, or content...
yabbXSScat.txt
Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=alert"xss" ----------------------------------------------------------...
CVE-2006-4157
Cross-site scripting XSS vulnerability in index.php in Yet another Bulletin Board YaBB allows remote attackers to inject arbitrary web script or HTML via the categories parameter...
CVE-2006-4157
CVE-2006-4157: A Cross-site scripting (XSS) vulnerability in index.php of Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter. The NVD entry lists a CVSSv2 base score of 6.8 (MEDIUM) with Network attack vector, user interac...
Yabb XSS
Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=scriptalert"xss "/script...
CVE-2006-3275
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action...
CVE-2006-3275
CVE-2006-3275 affects YaBB SE 1.5.5 and earlier, with a SQL injection in profile.php via a double-encoded user parameter in the viewprofile action. The underlying issue is a lack of proper input handling that allows remote attackers to execute SQL commands. Documented impact includes potential da...