CVE-2004-1965: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 redirect parameter to member.php, 2 to parameter to myhome.php 3 TID parameter to post.php, or 4 redirect parameter to index.p...

CVE-2004-1966: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter in board.php, 2 sortorder, perpage, or id parameters in member.php, 3 forums parameter in search.php, or 4 PID or FID parameters ...

CVE-2004-1862: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Extreme Messageboard XMB 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the 1 xmbuser parameter to xmb.php, 2 folder parameter to u2u.php, 3 viewmost, replymost, or latest parameter to stats.php, 4 messag...

CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

CVE-2005-1404

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

CVE-2005-1404: Undefined Security Weakness

MyPHP Forum 1.0 allows remote attackers to spoof the username by modifying the 1 nbuser parameter to post.php or 2 sender parameter to privmsg.php...

WordPress <=1.5 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Because of these vulnerabilities in template-functions-post.php, attackers can execute arbitrary commands via the title of the post or content. Solution Update WordPress to the latest possible version...

CVE-2005-1102: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the 1 content or 2 title of the post...

CVE-2004-1711

Moodle post.php XSS (CVE-2004-1711) affects Moodle prior to 1.3. The vulnerability arises from not validating the reply parameter in post.php, enabling remote XSS via crafted URLs. OpenVAS entries confirm a remote XSS in Moodle post.php by tampering with the reply variable; no explicit exploit de...

CVE-2004-1711: Undefined Security Weakness

Cross-site scripting XSS vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter...

CVE-2004-1531: Undefined Security Weakness

SQL injection vulnerability in post.php in Invision Power Board IPB 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter...

CVE-2005-0414

MercuryBoard 1.1.1 is affected by a SQL injection in post.php via the reply post action (index.php) using the t or qu parameters, allowing remote SQL commands (CVE-2005-0414). NVD lists base 7.5/ HIGH with network attack vector and no authentication. OpenVAS corroborates MercuryBoard vulnerabilit...

CVE-2005-0414: Undefined Security Weakness

SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with 1 the t parameter or 2 the qu parameter...

CVE-2004-0291

SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter...

Moodle 'post.php' 'reply' Parameter XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross-site scripting attack due to the application not properly validating the 'reply' variable on submission to the 'post.php' script. This allows a user to create a specially crafted URL that would execute arbitrary...

xss in moodle &#40;post.php&#41;

+--------------------------------+ | | | XSS in Moodle 1.3 post.php | | | +--------------------------------+ Autor: Javier Ubilla Brenni javierubillaatspymac.com Date: 02/08/04 Software Description: "Moodle is a course management system CMS - a software package designed to help educators create...

CVE-2004-0291: Undefined Security Weakness

SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter...