CVE-2005-2401

PHP-Fusion is affected by CVE-2005-2401: remote attackers can inject arbitrary CSS through the BBCode color tag in posts. The related Nessus plugin and CVE records indicate this affects PHP-Fusion builds around the 6.0x line (e.g.,

CVE-2005-2401: Undefined Security Weakness

PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets CSS via the BBCode color tag...

[SA16149] phpBB BBcode "url" Script Insertion Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2327

Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...

CVE-2005-2327

The CVE-2005-2327 entry describes a Cross-site scripting (XSS) vulnerability in the e107 content management system, affecting version 0.617 and earlier. The root cause is input handling that allows nested [url] BBCode tags to be processed in a way that enables remote injection of arbitrary script...

CVE-2005-2327

Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...

CVE-2005-2327: Undefined Security Weakness

Cross-site scripting XSS vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested url BBCode tags...

phpBB < 2.0.17 Nested BBCode URL Tags XSS

Binary data 3051.prm...

GLSA-200505-10 : phpBB: XSS Vulnerability

The remote host is affected by the vulnerability described in GLSA-200505-10 phpBB: XSS Vulnerability phpBB is vulnerable to a cross-site scripting vulnerability due to improper sanitization of user-supplied input. Coupled with poor validation of BBCode URLs which may be included in a forum post,...

CVE-2005-1193

The bbencodesecondpass and makeclickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a 1 javascript:, 2 applet:, 3 about:, 4 activex:, 5 chrome:, or 6 script: UR...

CVE-2005-1193

The CVE-2005-1193 vulnerability affects phpBB up to version 2.0.14 (before 2.0.15). The bbencode_second_pass and make_clickable functions in bbcode.php fail to filter BBCode URLs, allowing remote attackers to execute arbitrary script via URL schemes such as javascript:, applet:, about:, activex:,...

CVE-2005-1193: Undefined Security Weakness

The bbencodesecondpass and makeclickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, privmsg.php, and other scripts, allow remote attackers to execute arbitrary script via a BBcode tag with a 1 javascript:, 2 applet:, 3 about:, 4 activex:, 5 chrome:, or 6 script: UR...

phpBB: Cross-Site Scripting Vulnerability

Background phpBB is an Open Source bulletin board package. Description phpBB is vulnerable to a cross-site scripting vulnerability due to improper sanitization of user supplied input. Coupled with poor validation of BBCode URLs which may be included in a forum post, an unsuspecting user may follo...

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...

phpBB 2.0.x - BBCode.php URL Tag

phpBB 2.0.x - BBCode.php URL Tag source: https://www.securityfocus.com/bid/13545/info The phpbb vendor reports that a critical vulnerability exists in the BBCode handling routines of the 'bbcode.php' script. The bbcode url tag is not properly sanitized of user-supplied input. This could permit th...

CVE-2005-1448

CVE-2005-1448 describes a cross-site scripting (XSS) vulnerability in the Serendipity BBCode plugin for Serendipity, prior to version 0.8. Remote attackers can inject arbitrary web script or HTML, which executes in a user’s browser when viewing malicious entries or comments. The affected componen...

CVE-2005-1448

Cross-site scripting XSS vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1448

Cross-site scripting XSS vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1448: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the BBCode plugin for Serendipity before 0.8 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Serendipity BBCode Plugin XSS

According to its banner, the version of Serendipity installed on the remote host does not properly filter user-supplied input for selected fields if the BBCode plugin is enabled - it is not by default. By exploiting this flaw, an attacker can cause arbitrary HTML and script code to be executed by...