PHP-Nuke 5.x/6.0 - Avatar HTML Injection

source: https://www.securityfocus.com/bid/6750/info A problem with PHP-Nuke could allow remote users to execute arbitrary code in the context of the web site. The problem is in the lack of sanitization of some types of input. PHP-Nuke does not sanitize code submitted to a site from the avatar...

phpBB2 Showing users ip adresses

phpBB2 Showing users ip adresses -------------------------------------------- Affected Program: phpBB2 version 2.0.0, 2.0.1, 2.0.3 possibly earlier versions too, but not tested Vendor: http://www.phpbb.com Vendor Status: not informed yet Discovery Date: 9 oct 2002 Severity -------- All users can...