6297 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer...
Sql injection
Multiple SQL injection vulnerabilities in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to 1 arrays of id/stamp pairs and 2 the keys in arrays of key/value pairs in ipsclass.php; 3 the topics variable in...
CVE-2006-1287
Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer...
CVE-2006-1288
Multiple SQL injection vulnerabilities in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to 1 arrays of id/stamp pairs and 2 the keys in arrays of key/value pairs in ipsclass.php; 3 the topics variable in...
CVE-2006-1287
The CVE-2006-1287 entries describe a Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) versions 2.0.4 and 2.1.4 prior to 20060130. The vulnerability could allow remote attackers to steal cookies and potentially conduct other activities when the victim uses Internet Explorer. ...
CVE-2006-1288
Multiple SQL injection vulnerabilities in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to 1 arrays of id/stamp pairs and 2 the keys in arrays of key/value pairs in ipsclass.php; 3 the topics variable in...
CVE-2006-1288
CVE-2006-1288 affects Invision Power Board (IPB) with versions 2.0.4 and 2.1.4 before 20060105. The vulnerability is a SQL injection in multiple entry points where cookies and parameters are not properly sanitized, including ipsclass.php (arrays of id/stamp pairs; keys in key/value arrays), userc...
Cross site request forgery (csrf)
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in member.php in MyBulletin Board MyBB 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 aim, 2 yahoo, 3 msn, or 4 website field...
CVE-2006-1272
Multiple cross-site scripting XSS vulnerabilities in member.php in MyBulletin Board MyBB 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 aim, 2 yahoo, 3 msn, or 4 website field...
CVE-2006-1267
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...
CVE-2006-1267
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...
CVE-2006-1267
Invision Power Board 2.1.4 is affected by a session-hijacking vulnerability. An attacker can obtain the session ID from the s parameter and replay it in a separate request to potentially gain administrative privileges. The CVE-2006-1267 details indicate remote exploitation via network access with...
CVE-2006-1272
Multiple cross-site scripting XSS vulnerabilities in member.php in MyBulletin Board MyBB 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 aim, 2 yahoo, 3 msn, or 4 website field...
CVE-2006-1272
MyBB 1.0.3 contains multiple XSS vulnerabilities in member.php, exploitable via the fields aim, yahoo, msn, and website. Root cause: insufficient input sanitization in these fields leading to script or HTML injection, as described across CVE-2006-1272 entries. Document set does not include remedi...
CVE-2006-1267: Undefined Security Weakness
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by obtaining the session ID from the s parameter, then replaying it in another request...
CVE-2006-1272: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in member.php in MyBulletin Board MyBB 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 aim, 2 yahoo, 3 msn, or 4 website field...
CVE-2006-1287: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer...
CVE-2006-1288: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060105 allow remote attackers to execute arbitrary SQL commands via cookies, related to 1 arrays of id/stamp pairs and 2 the keys in arrays of key/value pairs in ipsclass.php; 3 the topics variable in...
XSS IN Invision Power Board
Software: Invision Power Board Web Site:http://www.invisionpower.com tested in v2.0.4 exploit : forum/index.php?act=Search&nav=au&CODE=show&searchid=5f25843edb0242889889796819a2b367&searchin=ooo&resulttype='scriptalertdocument.cookie/script...