99 matches found
Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities
Title: ====== Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Date: ===== 2012-04-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=504 VL-ID: ===== 504 Introduction: ============= Siche search v.0.5 for Zerboard is search module to known CMS named Zeroboard...
Siche Search 0.5 Zerboard Cross Site Scripting / SQL Injection
Title: ====== Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Date: ===== 2012-04-15 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=504 VL-ID: ===== 504 Introduction: ============= Siche search v.0.5 for Zerboard is search module to known CMS named Zeroboard...
Siche Search v.0.5 Zerboard Multiple Web Vulnerabilities
Exploit for php platform in category web applications Title: ====== Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Introduction: ============= Siche search v.0.5 for Zerboard is search module to known CMS named Zeroboard Copy of the Vendor Homepage: http://eos.pe.kr Abstract: ========...
VulnCheck KEV: CVE-2009-4834
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to nowconnect.php...
South Korea Zeroboard 0day&Exp-vulnerability warning-the black bar safety net
South Korea set to use more of the CMS ? php for $ii=0;$ii=3 0 0;$ii++ $c=int$ii1 0+1; print $c." \r\n"; echo" +----------------------------------------------------------------+\r\n"; echo" \r\n"; echo" +----------------------------------------------------------------+\r\n";...
CVE-2009-4834
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to nowconnect.php...
Code injection
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to nowconnect.php...
CVE-2009-4834
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to nowconnect.php...
CVE-2009-4834
CVE-2009-4834 affects Zeroboard 4.1 pl7: lib.php allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php. This is the core vulnerability described in multiple sources, with confirmed impact as remote code execution. Connected documen...
Zeroboard 4.1 pl7 now_connect() Remote Code Execution Exploit
No description provided by source. / poc by kyoungchip,jang email : [email protected] the bug - http://www.xpressengine.com/15955761 Application - Zeroboard 4.1 pl7 Reference: - http://www.nzeo.com - Zeroboard pregreplace vulnerability Remote nobody exploit by n0gada Target - My test server...
zeroboard Remote get webshell Exploit
No description provided by source. ?php $url = $argv1.'/lib.php'; echo" +----------------------------------------------------------------+\r\n"; echo" example php.exe zb.php http://www.fuck.com/zb \r\n"; echo" +----------------------------------------------------------------+\r\n"; if!$url die;...
Zeroboard文件泄露远程任意命令执行漏洞
BUGTRAQ: 12258 Zeroboard不正确过滤用户提交的URL请求，远程攻击者可以利用这个漏洞查看系统文件内容或以进程权限执行任意命令。 Zeroboard 4.1 pl2-p15 厂商补丁： Zeroboard --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.zeroboard.com/ 远程用户可以提供包含多个'../'字符的数据作为参数提交给有漏洞的脚本处理，可以WEB进程权限查看任意文件内容：...
Zeroboard PHP包含文件任意命令执行漏洞
BUGTRAQ: 5028 Zeroboard中的head.php脚本对用户输入缺少正确检查和过滤，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。 当php.ini配置文件中设置 allowurlfopen 变量， registerglobals 变量为 on 时，由于 head.php对输入过滤不够充分，攻击者可以通过head.php脚本装载远程主机上的PHP文件，如果远程PHP文件包含恶意PHP代码，可导致以WEB进程在系统上执行任意命令。 Zeroboard 4.1 pl2 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁：...
Zeroboard 4.1 pl7 Code Execution
/ poc by kyoungchip,jang email : [email protected] the bug - http://www.xpressengine.com/15955761 Application - Zeroboard 4.1 pl7 Reference: - http://www.nzeo.com - Zeroboard pregreplace vulnerability Remote nobody exploit by n0gada Target - My test server $ ./zbexpl...
ZeroBoard 4.1 pl7 - now_connect() Remote Code Execution
ZeroBoard 4.1 pl7 - nowconnect Remote Code Execution / poc by kyoungchip,jang email : [email protected] the bug - http://www.xpressengine.com/15955761 Application - Zeroboard 4.1 pl7 Reference: - http://www.nzeo.com - Zeroboard pregreplace vulnerability Remote nobody exploit by n0gada Targe...
ZeroBoard 4.1 pl7 - 'now_connect()' Remote Code Execution
/ poc by kyoungchip,jang email : [email protected] the bug - http://www.xpressengine.com/15955761 Application - Zeroboard 4.1 pl7 Reference: - http://www.nzeo.com - Zeroboard pregreplace vulnerability Remote nobody exploit by n0gada Target - My test server $ ./zbexpl...
Zeroboard 4.1 pl7 now_connect() Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= Zeroboard 4.1 pl7 nowconnect Remote Code Execution Exploit ============================================================= / poc by kyoungchip,jang the bug -...
Zeroboard preg_replace() vulnerability Remote nobody exploit
No description provided by source. / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected]...
CVE-2004-2738
CVE-2004-2738 affects ZeroBoard versions up to 4.1pl4, where a flaw in check_user_id.php allows cross-site scripting (XSS) via the user_id parameter. Remote attackers can inject arbitrary web script or HTML, leading to potential impact on users viewing vulnerable pages. Several connected sources ...