6085 matches found
Burning Board 1.1.1 - 'URL' Manipulation
source: https://www.securityfocus.com/bid/4512/info Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows. An attacker may allegedly create a malicious link which is capable of causing actions to b...
Burning Board 1.1.1 - URL Manipulation
Burning Board 1.1.1 - URL Manipulation source: https://www.securityfocus.com/bid/4512/info Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows. An attacker may allegedly create a malicious link...
Security holes in WoltLab Burning Board
Product : WoltLab Burning Board http://www.woltlab.de Versions : 1.1.0 and less Problems : - XSS - Access to users/admins accounts More details in french : http://www.ifrance.com/kitetoua/tuto/wbboard.txt translated by google : http://translate.google.com/translate?u=http3A...
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
[ARL02-A09] Board-TNK Cross Site Scripting Vulnerability
+/---------------- ALPER Research Labs ------/--------/+ +/---------------- Security Advisory -----/---------/+ +/---------------- ID: ARL02-A09 ----/----------/+ +/---------------- [email protected] ---/-----------/+ Advisory Information -------------------- Name : Board-TNK Cross Site Scriptin...
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
CVE-2002-0118: Undefined Security Weakness
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
CVE-1999-0930
wwwboard allows a remote attacker to delete message board articles via a malformed argument...
CVE-1999-0930: Undefined Security Weakness
wwwboard allows a remote attacker to delete message board articles via a malformed argument...
ReBB javascripts vulnerability
Hi! Another php - board named ReBB http://www.rebb.net has a img vulnerability. Exploit: Use this string my favorite : - imgjavascript:alert'test'/img Possible decision: All urls in img tag should start with http:// SliderGod...
Open Bulletin Board javascript bug.
OpenBB is free php-based forum. Exploit: imgjavasCript:alert'Hello world.'/img Vulnerable systems: All versions of Open Bulletin Board including v.1.0.0 Immune systems: None Solution: All url's in img tags should start with "http://" Yurij Rumiantsev...
XMB Forum 1.6 pre-beta - Image Tag Script Injection
source: https://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a forum message. This has been fixed i...
EasyBoard 2000 Remote Buffer Overflow Vulnerability
EasyBoard 2000 Remote Buffer Overflow Vulnerability Jin Ho You, [email protected] 1 Discussion EasyBoard 2000http://ezboard.new21.org is a web board CGI. Improperly manipulated user-supplied input to the Content-Type header can create an buffer overflow condition. This vulnerability...
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
CVE-2001-0897: Undefined Security Weakness
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
Дырки в Ultimate Bulletin Board (javascript, cookie)
Можно вставить javascript в таг IMG, кроме того при проверке куки не проверяется пароль пользователя...
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB before 5.47e allows remote attackers to steal user cookies via an IMG tag that references an about: URL with an onerror field...
Extracting a 3DES key from an IBM 4758
Extracting a 3DES key from an IBM 4758 The IBM 4758 is an extremely secure crytographic co-processor. It is used by banking systems and in other security conscious applications to hold keying material. It is designed to make it impossible to extract this keying material unless you have the correc...