CVE-2006-1396: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1395: Undefined Security Weakness

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

Ultimate PHP Board 'users.dat' Information Disclosure Vulnerability

Ultimate PHP Board UPB is prone to an information disclosure vulnerability SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ultimate PHP Board multiple XSS vulnerabilities

The remote version of Ultimate PHP Board UPB is affected by several cross-site scripting vulnerabilities. This issue is due to a failure of the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a...

Cholod MySQL Based Message Board - 'Mb.cgi' SQL Injection

source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Cholod MySQL Based Message Board - Mb.cgi SQL Injection

Cholod MySQL Based Message Board - Mb.cgi SQL Injection source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

CVE-2006-1369

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

CVE-2006-1369

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

CVE-2006-1369

The CVE-2006-1369 issue affects Invision Power Board (IPB) 2.1.5 and earlier, prior to 20060308. The vulnerability is a cross-site scripting (XSS) flaw exploitable through a Private Message (PM) under certain circumstances, enabling remote attackers to inject arbitrary web script or HTML. The roo...

CVE-2006-1369: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message PM in certain circumstances...

Cross site scripting

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

CVE-2006-1324

CVE-2006-1324 describes a Cross-site Scripting (XSS) vulnerability in Woltlab Burning Board (wBB) 2.3.4, specifically in acp/lib/class_db_mysql.php. An attacker can inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated, potentially affecting users who view t...

CVE-2006-1326

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...

CVE-2006-1326

CVE-2006-1326 affects Invision Power Board 2.0.4, with multiple XSS vulnerabilities exploitable through various parameters in index.php and related actions (Search, calendar, Print, Mail, Help, Members). The NVD description lists 16 input vectors in the application that may inject arbitrary scrip...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324: Undefined Security Weakness

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1326: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the 1 resulttype, 2 searchin, 3 nav, 4 forums, and 5 s parameters in the Search action to index.php; 6 st parameter to index.php with showtopics set to...