CVE-2007-4078

CVE-2007-4078 concerns multiple XSS vulnerabilities in AlstraSoft Text Ads Enterprise. The affected components are web pages handling user input: forgot_uid.php (r parameter), search_results.php (query or sk parameters), and website_page.php (pageId parameter). The root cause is improper input va...

CVE-2006-4078

The CVE-2006-4078 entry concerns DeluxeBB 1.08 (and possibly earlier) where pm.php (the PM system) allows remote attackers to bypass authentication by supplying an arbitrary username in the membercookie cookie parameter. This is a logic/authorization flaw in the PM component that enables access w...

CVE-2005-4078

CVE-2005-4078 describes multiple cross-site scripting (XSS) flaws in Ideal BB.NET 1.3 and earlier. The vulnerabilities permit remote injection of arbitrary web script or HTML via parameters in topics.aspx (forumID, boardID, topicRepeater1-p), categoryindex.aspx (boardID), posts.aspx (postID), for...

CVE-2022-4078

...