CVE-2005-1550: Undefined Security Weakness

easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...

OpenBB SQL Injection & Cross-site Scripting Vulnerability

Open Bulletin Board www.openbb.com Vulnerable versions: 1.0.8 OpenBB read.php SQL Injection Vulnerability Proof of concept: http://www.example.com/openbb/read.php?action=lastpost&TID=' http://www.example.com/openbb/read.php?TID=' OpenBB member.php Cross-Site Scripting Vulnerability Proof of...

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting

Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection

Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection source: https://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Ultimate PHP Board (UPB) Security Advisory

Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl - Woopie Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB ...

Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

phpBB contains an input validation vulnerability in "includes/bbcode.php"

Overview phpBB fails to sanitize user input, allowing the possible inclusion of active script content in user posts. Description phpBB is a widely used Open Source bulletin board package written in PHP.An input validation issue has been identified that allows a malicious phpBB user to include...

Woltlab Burning Board Detection

The remote host is running Burning Board or Burning Board Lite, message forum software packages that use PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18250; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"...

Woltlab Burning Board pms.php folderid Parameter XSS

The version of Burning Board or Burning Board Lite installed on the remote host may be prone to cross-site scripting attacks due to its failure to properly sanitize input passed to the 'folderid' parameter of the 'pms.php' script. An attacker may be able to exploit this flaw to cause arbitrary HT...

CVE-2004-1863

CVE-2004-1863 affects XMB (extreme message board) 1.9 beta/Nexus beta. The vulnerability family is cross-site scripting (XSS): remote attackers can inject arbitrary script/HTML via (1) u2uheader in editprofile.php, (2) restrict in member.php, (3) misc.php, (4) today.php, and (5) an arbitrary para...

CVE-2004-1965

OpenBB/Open Bulletin Board (v1.0.6 and earlier) exposes XSS via four vectors: (1) redirect in member.php, (2) to parameter in myhome.php, (3) TID parameter in post.php, and (4) redirect in index.php. The connected nuclei template confirms OpenBB 1.0.6 as vulnerable to open redirect/XSS with these...

CVE-2004-1966

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains multiple SQL injection flaws allowing remote SQL command execution via parameters: FID in board.php; sortorder, perpage, or id in member.php; forums in search.php; and PID or FID in post.php. Root cause is unvalidated input in these endpoint...

CVE-2004-1967

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains CSRF vulnerabilities in cp_forums.php, cp_usergroup.php, cp_ipbans.php, myhome.php, post.php, and moderator.php that allow remote attackers to execute arbitrary code by including code in an image tag or a link. The PT-2004-2864 entry confirm...

CVE-2004-1968

Open Bulletin Board (OpenBB) before version 1.0.6 contains a vulnerability in the readmsg action of myhome.php that allows remote attackers to read arbitrary messages by modifying the id parameter. The affected component is the readmsg functionality; underlying cause is improper validation of the...

CVE-2003-1162

Tritanium Bulletin Board 1.2.3 is affected by CVE-2003-1162. The vulnerability arises from index.php allowing remote attackers to read and reply to arbitrary messages by manipulating thread_id, forum_id, and sid parameters. The available sources describe the affected component and negligence in p...

CVE-2004-1785

SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this-chosenmonth variable...

CVE-2004-1965

Multiple cross-site scripting XSS vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 redirect parameter to member.php, 2 to parameter to myhome.php 3 TID parameter to post.php, or 4 redirect parameter to index.p...

CVE-2004-1966

Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter in board.php, 2 sortorder, perpage, or id parameters in member.php, 3 forums parameter in search.php, or 4 PID or FID parameters ...

CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2004-1969

The avatar upload capability in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript...