Woltlab Burning Board Multiple SQL Injections

The remote version of Burning Board includes an optional module, the Database module, that fails to properly sanitize the 'fileid' parameter of the 'infodb.php' script, which can be exploited to launch SQL injection attacks against the affected host. %NASLMINLEVEL 70300 C Tenable Network Security...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Woltlab Burning Board wBB allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter to galerieindex.php and possibly 2 galerieonfly.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-1034

Multiple cross-site scripting XSS vulnerabilities in Woltlab Burning Board wBB allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter to galerieindex.php and possibly 2 galerieonfly.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-1034

CVE-2006-1034 describes multiple cross-site scripting vulnerabilities in Woltlab Burning Board (wBB). The affected components are (1) galerie_index.php with the username parameter and (2) galerie_onfly.php, with the note that the second vector might not be XSS. Attacks can allow remote attackers ...

CVE-2006-1034

Multiple cross-site scripting XSS vulnerabilities in Woltlab Burning Board wBB allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter to galerieindex.php and possibly 2 galerieonfly.php. NOTE: the provenance of this information is unknown; the details are...

SQL injection in Invision Power Board v2.1.5

SQL injection in Invision Power Board v2.1.5 Software: Invision Power Board Web Site : http://forums.invisionpower.com Versions: v2.1.5 Type: SQL Injection Class: Remote example : http://www.victem.com/forum/index.php?showtopic=anytopic&pid=1&st=-1sql Discovered by : Mr.SNAKE GreeTz : greetz to a...

CVE-2006-1034: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Woltlab Burning Board wBB allow remote attackers to inject arbitrary web script or HTML via 1 the username parameter to galerieindex.php and possibly 2 galerieonfly.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-1000

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 newsid parameter to newsdetailsview.asp and 2 password parameter to login.asp...

CVE-2006-1000

Pentacle In-Out Board 3.0 and earlier contain multiple SQL injection vulnerabilities. The affected components are newsdetailsview.asp (parameter newsid) and login.asp (parameter password). The root cause is improper input handling, enabling remote attackers to execute arbitrary SQL commands and b...

CVE-2006-1000

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 newsid parameter to newsdetailsview.asp and 2 password parameter to login.asp...

CVE-2006-1001: Undefined Security Weakness

SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter...

Invision Power Board showtopic.php st Parameter SQL Injection

Binary data 3462.prm...

EV0084.txt

New eVuln Advisory: Skate Board Multimple Vulnerabilities http://evuln.com/vulns/84/summary.html --------------------Summary---------------- eVuln ID: EV0084 CVE: CVE-2006-0809 CVE-2006-0810 CVE-2006-0811 Software: Skate Board Sowtware's Web Site: http://bb.jiraiya.se/main.php?content=start...

[EXPL] Invision Power Board Password Change SQL-Injection Exploit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Advisory-18.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 18 - 03/03/06 -------------------------------------------------------- Program: phpBB Homepage: http://www.phpbb.com Vulnerable Versions: All phpBB versions Risk: High Risk!! Impact: Multiple DoS...

Invision Power Board 2.1.5 - showtopic SQL Injection

Invision Power Board 2.1.5 - showtopic SQL Injection source: https://www.securityfocus.com/bid/16971/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

CVE-2006-1000: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 newsid parameter to newsdetailsview.asp and 2 password parameter to login.asp...

Invision Power Board 2.1.5 - showtopic SQL Injection

source: https://www.securityfocus.com/bid/16971/info Invision Power Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

phpBB <= 2.0.19 Multiple DoS vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 18 - 03/03/06 -------------------------------------------------------- Program: phpBB Homepage: http://www.phpbb.com Vulnerable Versions: All phpBB versions Risk: High Risk!! Impact: Multiple DoS...

Woltlab Burning Board 2.3.4 - misc.php Cross-Site Scripting

Woltlab Burning Board 2.3.4 - misc.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16959/info Woltlab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue t...