Invision Power Board Privilege Esaclation (2.0.1 + more)

--------- Title: Invision Power Board --------- Version: 2.0.1 maybe more --------- Severity: Low --------- Info: Invision Board Admin able to execute arbitrary code as uid of the apache process. ---------- Bugs: 1 Fails to jail location of Task Managers scripts and allows directory traversal. 2...

Invision Power Board (IP.Board) 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15344/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitiz...

Invision Power Board (IP.Board) 2.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15344/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. OpenVAS Vulnerability Test $I...

GoSmart message board multiple flaws

The remote host is running GoSmart message board, a bulletin board manager written in ASP. The remote version of this software contains multiple flaws, due o to a failure of the application to properly sanitize user-supplied input. It is also affected by a cross-site scripting vulnerability. As a...

Easy Message Board Command Execution

The remote host is running Easy Message Board, a bulletin board system written in perl. The remote version of this script contains an input validation flaw which may be used by an attacker to perform a directory traversal attack or execute arbitrary commands on the remote host with the privileges...

Ultimate PHP Board Information Leak

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version which may allow an attacker to view private message board information. OpenVAS Vulnerability Test $Id: upbinfoleak.nasl 5780 2017-03-30 07:37:12Z cfi $ Description: Ultimate PHP Board Information Leak Authors: Erik...

Easy Message Board Command Execution

The remote host is running Easy Message Board, a bulletin board system written in perl. The remote version of this script contains an input validation flaw. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Ultimate PHP Board Information Leak

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version which may allow an attacker to view private message board information. SPDX-FileCopyrightText: 2004 Edgeos, Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Multiple Vulnerabilities in MercuryBoard

The remote host is running MercuryBoard, a message board system written inPHP. Multiple vulnerabilities have been discovered in the product that allow an attacker to cause numerous cross site scripting attacks, inject arbitrary SQL statements and disclose the path under which the product has been...

wwwboard passwd.txt

This WWWBoard board system comes with a password file passwd.txt installed next to the file SPDX-FileCopyrightText: 1999 Jonathan Provencher Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SQL Disclosure in Invision Power Board

There is a vulnerability in the current version of Invision Power Board that allows an attacker to reveal the SQL queries used by the product, and any page that was built by the administrator using the IPB SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a...

Invision Power Board Calendar SQL Injection Vulnerability

The remote host is running Invision Power Board - a CGI suite designed to set up a bulletin board system on the remote web server. A vulnerability has been discovered in the sources/calendar.php file that allows unauthorized users to inject SQL commands. SPDX-FileCopyrightText: 2003 Noam Rathaus...

Ultimate PHP Board < 1.9.7 Multiple Vulnerabilities

Ultimate PHP Board UPB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Invision Power Board XSS Vulnerability (Nov 2005)

Invision Power Board is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. SPDX-FileCopyrightText: 2005...

vBulletin Init.PHP unspecified vulnerability

The remote host is running vBulletin, a web based bulletin board system written in PHP. The remote version of this software is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation...

CVE-2005-3369

Multiple SQL injection vulnerabilities in the Info-DB module infodb.php in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the 1 fileid and 2 subkatid parameters...

CVE-2005-3369

Woltlab Burning Board

CVE-2005-3369: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the Info-DB module infodb.php in Woltlab Burning Board 2.7 and earlier allow remote attackers to execute arbitrary SQL commands and possibly upload files via the 1 fileid and 2 subkatid parameters...