145 matches found
Design/Logic Flaw
The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...
CVE-2006-4449
Cross-site scripting XSS vulnerability in attachment.php in MyBulletinBoard MyBB 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer...
CVE-2006-4449
CVE-2006-4449 describes a Cross-site Scripting (XSS) vulnerability in attachment.php of MyBulletinBoard (MyBB) 1.1.7 and possibly other versions. The issue allows remote attackers to inject arbitrary web script or HTML by abusing a GIF image that contains URL-encoded Javascript, which is rendered...
CVE-2005-4449
The CVE-2005-4449 entry concerns verify.php in FlatNuke 2.5.6 , where remote authenticated administrators can modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting code via the body parameter. This describes a privilege-elevation-like issue within an authenti...
