CVE-2005-1642

Concrete details found: CVE-2005-1642 affects Burning Board (Woltlab Burning Board) versions up to 2.3.1 and earlier. The vulnerability is an SQL Injection in the verify_email($email) function, allowing remote attackers to influence SQL queries via the $email variable and potentially access data ...

CVE-2005-1642

SQL injection vulnerability in the verifyemail function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable...

CVE-2005-1642: Undefined Security Weakness

SQL injection vulnerability in the verifyemail function in Woltlab Burning Board 2.x and earlier allows remote attackers to execute arbitrary SQL commands via the $email variable...

JGS-Portal for WoltLab Burning Board Multiple Vulnerabilities (SQLi, XSS)

The remote host is running the JGS-Portal, a web portal written in PHP. The remote version of this software contains an input validation flaw leading to multiple SQL injection and cross-site scripting vulnerabilities. An attacker may exploit these flaws to execute arbitrary SQL commands against t...

Woltlab Burning Board SQL Injection Vulnerability

GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...

CVE-2005-1597

CVE-2005-1597 affects Invision Power Board (IPB) versions 2.0.3 and earlier. The vulnerability is a Cross-Site Scripting (XSS) flaw in the search.php and topics.php scripts, caused by unsanitized input in the highlite parameter, which allows arbitrary script/HTML injection. Public sources (IPB ex...

CVE-2005-1612

OpenBB (Open Bulletin Board) vulnerable to SQL injection in read.php via the TID parameter. Affected version: OpenBB 1.0.8. Risk includes remote command execution against the database with partial confidentiality/ integrity/ availability impact (CVSS v2 base 7.5). Other documents confirm XSS also...

CVE-2005-1613

OpenBB (Open Bulletin Board) <= 1.0.8 contains a cross-site scripting (XSS) vulnerability in member.php that allows an attacker to inject arbitrary script or HTML via the reverse parameter in a list action. This CVE, CVE-2005-1613, is documented across multiple sources (NVD, CVE list, and Open...

CVE-2005-1614

Vulnerability overview (CVE-2005-1614) : The UPB (Ultimate PHP Board) versions 1.8 through 1.9.6 are affected by a cross-site scripting (XSS) flaw in the viewforum.php script, exploitable via the postorder parameter. This can allow remote attackers to inject arbitrary script/HTML. The NVD reports...

CVE-2005-1615

Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 are affected by a vulnerability in viewforum.php where the postorder parameter is not properly handled by textdb.inc.php, potentially allowing remote attackers to read sensitive data via a SQL injection-like flaw. Multiple sources (CVE records a...

CVE-2005-1616

CVE-2005-1616 concerns Ultimate PHP Board (UPB). The connected docs show that UPB versions up to 1.9.6 (i.e.,

CVE-2005-1598

CVE-2005-1598 corresponds to a SQL Injection in Invision Power Board (IPB) <= 2.0.3. The vulnerability allows remote attackers to execute arbitrary SQL via a crafted pass_hash cookie that alters the internal $pid variable. Impact is partial confidentiality and integrity; variants include addit...

CVE-2005-1597

Cross-site scripting XSS vulnerability in 1 search.php and 2 topics.php for Invision Power Board IPB 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter...

CVE-2005-1598

SQL injection vulnerability in Invision Power Board IPB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash passhash that modifies the internal $pid variable...

CVE-2005-1612

SQL injection vulnerability in read.php in Open Bulletin Board OpenBB 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2005-1613

Cross-site scripting XSS vulnerability in member.php in Open Bulletin Board OpenBB 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse parameter in a list action...

CVE-2005-1615

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability...

CVE-2005-1614

Cross-site scripting XSS vulnerability in viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter...

CVE-2005-1598

SQL injection vulnerability in Invision Power Board IPB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash passhash that modifies the internal $pid variable...

CVE-2005-1615

viewforum.php in Ultimate PHP Board UPB 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability...