6307 matches found
Invision Power Board (IP.Board) < 2.0 Alpha 3 - SQL Injection (PoC)
IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC, ProblemIsHere DESC LIMIT 0,15 mySQL error: You have an error in you...
Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads
-------------------------------------------------------------------- Virginity Security Advisory 2003-002 - - - -------------------------------------------------------------------- DATE : 2003-10-31 22:59 GMT TYPE : remote VERSIONS AFFECTED : == Tritanium Bulletin Board 1.2.3...
Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access
source: https://www.securityfocus.com/bid/8944/info It has been reported that Tritanium Bulletin Board may be prone to an access validation error that may allow a remote attacker to to gain unauthorized access to threads. A remote attacker may be able to access sensitive data by modifying the URL...
Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access
Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access source: https://www.securityfocus.com/bid/8944/info It has been reported that Tritanium Bulletin Board may be prone to an access validation error that may allow a remote attacker to to gain unauthorized access to threads. A...
GoldLink 3.0 - Cookie SQL Injection
GoldLink 3.0 - Cookie SQL Injection source: https://www.securityfocus.com/bid/8847/info GoldLink is prone to SQL injection attacks. This is due to insufficient validation of values supplied via cookies. As a result, it may be possible to manipulate SQL queries, potentially resulting in informatio...
GoldLink 3.0 - Cookie SQL Injection
source: https://www.securityfocus.com/bid/8847/info GoldLink is prone to SQL injection attacks. This is due to insufficient validation of values supplied via cookies. As a result, it may be possible to manipulate SQL queries, potentially resulting in information disclosure, bulletin board...
Comment Board XSS Vulnerability
Comment Board XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Comment Board Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Comment Board works straight away with little or no configuration...
Thread-IT Message Board XSS Vulnerability
Thread-IT Message Board XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Thread-IT Message Board Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Thread-IT is a simple message board product that...
minihttp.txt
Minihttpserver 1.x Host Engine Flaws Url: http://www.minihttpserver.net + File-Sharing for NET: "File Sharing for net is a complete, secure web server that shares your business documents and files over the web: remote users only need browsers to view your files. Share, transfer files securely wit...
Invision Power Board : XSS in [FONT] and [COLOR] tags.
Informations : °°°°°°°°°°°°°° Language : PHP Version : 1.2 FINAL Website : http://www.invisionboard.com/ Problem : Permanent XSS Dev : °°°°° FONT=expressionalertdocument.cookietext/FONT will made the HTML : span style='font-family:expressionalertdocument.cookie'text/span...
Invision Power Board (IP.Board) 1.x - index.php showtopic Cross-Site Scripting
Invision Power Board IP.Board 1.x - index.php showtopic Cross-Site Scripting source: https://www.securityfocus.com/bid/8575/info Invision Power Board is prone to a cross-site scripting vulnerability. It has been reported that a remote attacker may construct a malicious link to the index.php scrip...
Invision Power Board (IP.Board) 1.x - 'index.php' showtopic Cross-Site Scripting
source: https://www.securityfocus.com/bid/8575/info Invision Power Board is prone to a cross-site scripting vulnerability. It has been reported that a remote attacker may construct a malicious link to the index.php script and supply arbitrary HTML code as a value for the 'showtopic' URI parameter...
IdealBB 1.4.9 Beta - HTML Injection
IdealBB 1.4.9 Beta - HTML Injection source: https://www.securityfocus.com/bid/8480/info IdealBB is prone to an HTML injection vulnerability. This could permit remote attackers to inject malicious HTML and script code into board messages. The attacker's code may be rendered in the web browser of t...
CVE-2003-0587
Cross-site scripting XSS vulnerability in Infopop Ultimate Bulletin Board UBB 6.x allows remote authenticated users to execute arbitrary web script and gain administrative access via the "displayed name" attribute of the "ubber" cookie...
DCForum+ 1.2 - Subject HTML Injection
DCForum+ 1.2 - Subject HTML Injection source: https://www.securityfocus.com/bid/8384/info DCForum+ is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code in the subject field of posts to the bulletin board. This is because the...
PHPOutsourcing Zorum 3.4 - Full Path Disclosure
source: https://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may allow an attacker to gain knowledge of the file...
bug in Invision Power Board
I found possibility to run Script java Script, VBScript on the system Invision Power Board... It's possible to do if it much many things like a withdrawal of cookie, advertising .... For example: http://forums.invisionpower.com/admin.php?adsess='scriptwindow.open window.location.search.substring...
Invision Power Board (IP.Board) 1.01.11.2 - admin.php Cross-Site Scripting
Invision Power Board IP.Board 1.01.11.2 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/8381/info Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed b...
Invision Power Board (IP.Board) 1.0/1.1/1.2 - 'admin.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/8381/info Invision Power Board admin.php script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in an Invision Power Board script on user-influenced URI...
Invision Board spoof and defacement
-INTRO- All versions of Invisions Board have a flaw in their input filtering that allows an attacker to completely mess up Invision's display and in one case I managed to change the URL of some of the forums links, which could be used to refer users to fake login sites to collect passwords etc...