40 matches found
EUVD-2006-2486
Malware in sbrugna...
EUVD-2008-5917
Malware in sbrugna...
EUVD-2006-6616
Malware in sbrugna...
EUVD-2009-0768
Malware in sbrugna...
YapBB 1.2 'class_yapbbcooker.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30686/info YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...
YapBB <= 1.2 Beta2 (yapbb_session.php) Remote File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl YapBB =1.2 Beta Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...
CVE-2009-0768
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...
Sql injection
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...
CVE-2009-0768
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...
CVE-2009-0768
The CVE-2009-0768 entry applies to YapBB version 1.2 and earlier, with a SQL injection vulnerability in forumhop.php. The vulnerability is triggered via the forumID parameter in a next action, allowing remote attackers to execute arbitrary SQL commands. This is supported by multiple sources in th...
YapBB 1.2 - forumID Blind SQL Injection
YapBB 1.2 - forumID Blind SQL Injection --+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...
YapBB 1.2 Blind SQL Injection
--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...
YapBB 1.2 - 'forumID' Blind SQL Injection
--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...
CVE-2008-5947
PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...
CVE-2008-5947
CVE-2008-5947 : In YapBB 1.2.Beta 2, a PHP remote file inclusion flaw exists in include/class_yapbbcooker.php triggered by a URL in the cfgIncludeDirectory parameter. The vulnerability allows remote attackers to cause arbitrary PHP code execution. The CVSS metrics indicate Network access, require...