Lucene search
+L

647 matches found

securityvulns
securityvulns
added 2005/05/14 12:00 a.m.59 views

OpenBB SQL Injection & Cross-site Scripting Vulnerability

Open Bulletin Board www.openbb.com Vulnerable versions: 1.0.8 OpenBB read.php SQL Injection Vulnerability Proof of concept: http://www.example.com/openbb/read.php?action=lastpost&TID=' http://www.example.com/openbb/read.php?TID=' OpenBB member.php Cross-Site Scripting Vulnerability Proof of...

0.6AI score
SaveExploits0
exploitpack
exploitpack
added 2005/05/13 12:00 a.m.20 views

OpenBB 1.0.8 - Read.php SQL Injection

OpenBB 1.0.8 - Read.php SQL Injection source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

8.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/05/13 12:00 a.m.62 views

OpenBB 1.0.8 - 'Read.php' SQL Injection

source: https://www.securityfocus.com/bid/13624/info OpenBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

7.5CVSS5.8AI score0.02159EPSS
SaveExploits2
exploitpack
exploitpack
added 2005/05/13 12:00 a.m.15 views

OpenBB 1.0.8 - member.php Cross-Site Scripting

OpenBB 1.0.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2005/05/13 12:00 a.m.38 views

OpenBB 1.0.8 - 'member.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13625/info OpenBB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

6.8CVSS5.8AI score0.03653EPSS
SaveExploits2
Cvelist
Cvelist
added 2005/05/10 4:00 a.m.30 views

CVE-2004-1919

The hashstrcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service crash via large malformed strings...

6.6AI score0.03134EPSS
SaveExploits2References4
NVD
NVD
added 2004/10/25 4:00 a.m.23 views

CVE-2004-1632

Cross-site scripting XSS vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php...

4.3CVSS5.6AI score0.0127EPSS
SaveExploits1References4
Rows per page
Query Builder