CVE-2004-1578

Cross-site scripting XSS vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header...

CVE-2004-1589

CVE-2004-1589 documents a cross-site scripting (XSS) vulnerability in GoSmart Message Board (ASP). The flaw allows remote attackers to inject and execute scripts via (1) Category on Forum.asp or (2) MainMessageID on ReplyToQuestion.asp. Connected sources corroborate XSS presence and relate GoSmar...

CVE-2004-1589: Undefined Security Weakness

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...

CVE-2004-1578: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header...

CVE-2004-1588: Undefined Security Weakness

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the 1 QuestionNumber and Category parameters to Forum.asp or 2 Username and Password parameter to LoginExec.asp...

CVE-2004-1555: Undefined Security Weakness

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the 1 keywords parameter to search.asp, 2 handle parameter to profile.asp, 3 txtUserHandle parameter to reg2.asp or 4 txtUserEmail parameter to forgot.asp...

CVE-2005-0477

The CVE-2005-0477 entry describes a Cross-site scripting (XSS) vulnerability in the SML code of Invision Power Board 1.3.1 FINAL. The issue can be triggered by crafted content in (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:u...

CVE-2004-1536

CVE-2004-1536 affects the ibProArcade module of Invision Power Board (IPB) 1.x and 2.x. The vulnerability is a SQL injection in index.php through the cat parameter, allowing remote attackers to execute arbitrary SQL commands on the backend database. The Nessus/NVD/CVE references confirm remote-ex...

CVE-2005-0477

Cross-site scripting XSS vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via 1 a signature file or 2 a message post containing an IMG tag within a COLOR tag whose style is set to background:url...

CVE-2004-1531

SQL injection vulnerability in post.php in Invision Power Board IPB 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter...

CVE-2004-1536

SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board IPB 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2004-1531

The vulnerability CVE-2004-1531 affects Invision Power Board (IPB) versions 2.0.0–2.0.2, where the sources/post.php qpid parameter is vulnerable to SQL injection. The issue arises in the SQL query handling within post.php, allowing an attacker to inject arbitrary SQL commands into the remote data...

CVE-2004-1536: Undefined Security Weakness

SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board IPB 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2004-1531: Undefined Security Weakness

SQL injection vulnerability in post.php in Invision Power Board IPB 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter...

CVE-2005-0477: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SML code for Invision Power Board 1.3.1 FINAL allows remote attackers to inject arbitrary web script via 1 a signature file or 2 a message post containing an IMG tag within a COLOR tag whose style is set to background:url...

CVE-2004-1441

Cross-site scripting XSS vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2004-1441

CVE-2004-1441 describes a cross-site scripting (XSS) vulnerability in the icq.cgi component of Board Power 2.04PF, exploitable by remote attackers via the action parameter to inject arbitrary web script or HTML. The NVD entry assigns a high base score (9.3, CVSS2.0) with network attack vector and...

CVE-2004-1441: Undefined Security Weakness

Cross-site scripting XSS vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2005-0216

Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...

CVE-2005-0216

CVE-2005-0216 describes a cross-site scripting (XSS) vulnerability in the formmail.php component of Woltlab Burning Board Lite 1.0.0 and 1.0.1e (potentially other versions). The issue allows remote attackers to inject arbitrary web script and HTML via the userid parameter. The provided sources do...