Binary Board System 0.2.5 - 'stats.pl' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15913/info binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

Binary Board System 0.2.5 - stats.pl Multiple Cross-Site Scripting Vulnerabilities

Binary Board System 0.2.5 - stats.pl Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15913/info binary board system is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Binary Board System XSS vuln.

Binary Board System XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/binary-board-system-xss-vuln.html vendor:http://binary-concepts.com/cgi/bbs/ affected version:0.2.5 and prior Product Description: The Binary Board System BBS is a...

CVE-2005-4232

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-4232

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

CVE-2005-4232

Jamit Job Board is affected: SQL injection in index.php via the cat parameter for versions 2.4.1 and earlier. The underlying issue is a vulnerable dynamic SQL path in index.php, allowing remote attackers to execute arbitrary SQL commands. The vendor disputes the issue, and CVE records note that s...

PT-2005-4920 · Jamit · Jamit Job Board

Name of the Vulnerable Software and Affected Versions: Jamit Job Board versions 2.4.1 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the cat parameter in the "index.php" file. The vendor has disputed this issue, claiming it has no basi...

CVE-2005-4232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified...

ThWboard.txt

KAPDA New advisory Vendor: http://www.thwboard.de Vulnerable Version: 3 beta 2.8 Bug: HTML Injection , XSS , SQL Injection Exploitation: Remote with browser Description: -------------------- ThWboard is a freely available German PHP-based message board program that uses a MySQL database...

Jamit Job Board 2.4.x SQL inj.

Jamit Job Board 2.4.x SQL inj. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html vendor:http://www.jamit.com.au/ affected version:2.4.1 and prior Product Description: Job Board Pro is a PHP application for running and...

[KAPDA::#15] - ThWboard multiple vulnerabilities

KAPDA New advisory Vendor: http://www.thwboard.de Vulnerable Version: 3 beta 2.8 Bug: HTML Injection , XSS , SQL Injection Exploitation: Remote with browser Description: -------------------- ThWboard is a freely available German PHP-based message board program that uses a MySQL database...

Ideal BB.NET 1.3 XSS vuln

Ideal BB.NET 1.3 XSS vuln Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ideal-bbnet-13-xss-vuln.html vendor:www.idealscience.com/site/products/idealbb.net.aspx affected version: 1.3 and prior Product Description: It is a powerful bulletin board...

kapda-phpp.txt

KAPDA New advisory Vendor: http://www.php-post.co.uk/ Vulnerable Version: v1.0 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- PHPP is a free message board powered by PHP and MySQL. Vulnerability: -------------------- HTML Injection: The software do...

CVE-2005-3871

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...

CVE-2005-3871

CVE-2005-3871 concerns multiple SQL injection vulnerabilities in Joels Bulletin Board (JBB) v0.9.9rc3 and earlier. The flaws allow remote attackers to inject SQL via (1) nr in topiczeigen.php, (2) forum and (3) zeigeseite in showforum.php, (4) forum in newtopic.php, and (5) tidnr in neuerbeitrag....

CVE-2005-3871

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...

CVE-2005-3871: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Joels Bulletin board JBB 0.9.9rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter in topiczeigen.php, 2 forum and 3 zeigeseite parameters in showforum.php, 4 forum parameter in newtopic.php, and 5 tidnr paramete...

SimpleBBS v1.1 SQL inj. vuln.

SimpleBBS v1.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/simplebbs-v11-sql-inj-vuln.html affected version: v1.1 and prior Product Description: SimpleBBS is a free flat-file based bulletin board. It is very easy to install and...

Netzbrett 1.5.1 SQL inj. vuln.

Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...

ShockBoard SQL inj. vuln.

ShockBoard SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/shockboard-sql-inj-vuln.html Vendor:http://www.sourceshock.com/ affected version:v3.0 and v4.0 develop. version Product Description: An easy to setup and use message board...