CVE-2004-2241

Phorum 5.0.11 and earlier is affected by a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML or web script via search.php. The note indicates some sources claim the vulnerable file is read.php, but this conflicts with the vendor’s patch. The NVD entry,...

CVE-2004-2180

WowBB Forum 1.61 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities. The flaws allow attackers to inject arbitrary script/HTML via numerous vectors: country (view_user.php), show (view_forum.php), letter (view_user.php), highlight (view_topic.php), show (inde...

CarLine Forum Russian Board 4.2 - 'search.php?text_poisk' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...

phpBB 2.0.15 - Register Multiple Users (Denial of Service)

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.15 & Lower versions Risk: High Risk!! Impact:...

CVE-2005-1833

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...

CVE-2003-1216

SQL injection vulnerability in search.php for phpBB 2.0.6 and earlier allows remote attackers to execute arbitrary SQL and gain privileges via the searchid parameter...

CVE-2002-1662

Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via 1 search.php and 2 the "Your name" field during account registration...

CVE-2005-1500

Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via 1 the keyword parameter in search.php; or 2 the dateno parameter in viewdate mode, 3 the catid parameter in viewcat mode, the 4 monthno or 5 year parameter in viewmonth mode, or ...

CVE-2004-1797

CVE-2004-1797 is described as a Cross-site scripting (XSS) vulnerability in FreznoShop 1.3.0 RC1 and earlier, exploitable via the search parameter in search.php. The affected software is FreznoShop; the vulnerable file/function is search.php, where user-supplied input in the search parameter can ...

CVE-2004-2055

Cross-site scripting XSS vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the searchauthor parameter...

CVE-2004-2055

The CVE-2004-2055 issue affects phpBB

Invision Power Board < 2.0.4 Multiple Vulnerabilities (SQLi, XSS)

According to its banner, the version of Invision Power Board on the remote host suffers from multiple vulnerabilities : - SQL Injection Vulnerability The application fails to sanitize user-input supplied through the 'passhash' cookie in the 'sources/login.php' script, which can be exploited to...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...

CVE-2005-0843

CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...

CVE-2005-0526

Multiple cross-site scripting XSS vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via 1 the search string to search.php, 2 the subject of a PM, which is processed by pm.php, or 3 the body of a PM, which is processed by pmpshow.php...

PHP-Calendar < 0.10.3 includes/search.php SQL Injection

Binary data 2864.prm...

sphpblog search.php q Parameter XSS

Due to a lack of input validation, the remote version of Simple PHP Blog can be used to perform a cross-site scripting attack by injecting arbitrary script code to the 'q' parameter of the search.php script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; if...

SPHPBlog 0.4 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13170/info sphpBlog is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

CVE-2005-0843

CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting attacks via the body parameter, which is included in the resulting Location header...