Ultimate PHP Board add.php Direct Request Information Disclosure

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version that could allow an attacker to view private message board information. %NASLMINLEVEL 70300 This script was written by Erik Stephens See the Nessus Scripts License for details Changes by Tenable: - Revised plugin...

Invision Gallery SQL Injection Vulnerabilities

Vendor : Invision Power Services URL : http://www.invisiongallery.com Version : Invision Gallery 1.0.1 Risk : SQL Injection Vulnerabilities Description: Invision Gallery is a fully featured, powerful gallery system that is easy and fun to use! It plugs right into your existing Invision Power Boar...

CVE-2004-0254

CVE-2004-0254 describes a cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x that allows a remote attacker to execute arbitrary script as other users via an img tag. The NVD entry lists a base score of 6.8 (Medium) with Network attack vector, no authentication, and partial impa...

CVE-2004-0355

CVE-2004-0355 affects Invision Power Board 1.3 Final. A remote attacker can select a non-image file for the "Personal Photo" field, causing an error message that reveals the installation path (partial information disclosure). The NVD/NVD-derived data indicate a base score of 5.0 (Medium), network...

CVE-2004-0338

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter...

CVE-2004-0359

Cross-site scripting XSS vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the 1 c, 2 f, 3 showtopic, 4 showuser, or 5 username parameters...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

CVE-2004-0338

The CVE-2004-0338 affects Invision Board Forum's search.php; a SQL injection via the st parameter allows remote arbitrary queries. The connected sources (NVD, CVE records, CVEList) confirm the vulnerability but do not provide exploit code or active exploitation status in these documents. No remed...

CVE-2004-0359

CVE-2004-0359 is an XSS vulnerability in the Invision Power Board 1.3 final, triggered by unvalidated input in index.php via the parameters (c, f, showtopic, showuser, username). The underlying cause is unsanitized user-supplied values leading to script execution in other users’ sessions. The NVD...

CVE-2004-0254

Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...

CVE-2004-0338: Undefined Security Weakness

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter...

CVE-2004-0355: Undefined Security Weakness

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

CVE-2004-0254: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag...

CVE-2004-0359: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the 1 c, 2 f, 3 showtopic, 4 showuser, or 5 username parameters...

Invision Power Board index.php pop Parameter XSS

There is a bug in the version of Invision Power Board on the remote host that makes it vulnerable to cross-site scripting attacks. An attacker may exploit this issue to steal the credentials of legitimate users of this site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

phpBB 2.0.6d - Cross Site Scripting

phpBB 2.0.6d - Cross Site Scripting phpBB Cross Site Scripting Vendor: phpBB Group Product: phpBB Version: = 2.0.6d Website: http://www.phpbb.com/ BID: 9865 9866 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a...

Invision Power Board (IP.Board) 1.3 - Pop Cross-Site Scripting

Invision Power Board IP.Board 1.3 - Pop Cross-Site Scripting source: https://www.securityfocus.com/bid/9822/info It has been reported that Invision Power Board may be prone to a cross-site scripting vulnerability. This may allow a remote attacker to cause hostile HTML or script code to be rendere...

Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity

Software: Invision Power Board Vendor: http://www.invisionboard.com/ Versions: U v1.3 Final Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 29 Feb 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Web: http://theinsider.deep-ice.com 1...

Invision Power Board (IP.Board) 1.3 - 'Pop' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9822/info It has been reported that Invision Power Board may be prone to a cross-site scripting vulnerability. This may allow a remote attacker to cause hostile HTML or script code to be rendered in a user's browser via a malicious link to a vulnerable...

invision13.txt

Software: Invision Power Board Vendor: http://www.invisionboard.com/ Versions: U v1.3 Final Bug: Cross Site Scripting Vulnerabillity Risk: Medium Exploitation: Remote with browser Date: 29 Feb 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Web: http://theinsider.deep-ice.com 1...