CVE-2005-2030

Ultimate PHP Board (UPB) 1.9.6 GOLD stores passwords in the users.dat file with weak encryption and places it under the web document root, enabling remote attackers to obtain credentials via direct access to db/users.dat. The vulnerability notes suggest exploitation could involve CVE-2005-2005 to...

CVE-2004-2030

CVE-2004-2030 describes multiple XSS vulnerabilities in Liferay’s index.jsp prior to version 2.2.0 (released 2004-10-01), where remote attackers could inject arbitrary web script or HTML by exploiting the message subject. The accompanying sources confirm the vulnerability class (XSS) and affected...

CVE-2004-2030

Multiple cross-site scripting XSS vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject...