CVE-2006-5729

The CVE-2006-5729 entry concerns Yazd Discussion Forum prior to version 3.0 beta, where a mismanaged permission model allows remote authenticated users to (1) reply to a message in an arbitrary forum if they can create a message in any forum, and (2) perform certain unauthorized forum actions due...

CVE-2006-5729: Undefined Security Weakness

Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to 1 reply to a message in an arbitrary forum, if authorized to create a message in any forum; and 2 perform certain unauthorized forum actions, related to an "error in how th...

Cross site scripting

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2870

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2870: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2807

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...

CVE-2006-2807

The CVE-2006-2807 entry concerns ASPwebSoft Speedy Asp Discussion Forum. Affected component: the web application’s profileupdate.asp path where a modified account id and possibly arbitrary values for name, email, country, password, and passwordre can permit a remote attacker to change a user’s pa...

CVE-2006-2807

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...

CVE-2006-2807: Undefined Security Weakness

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...

ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit

----------------------------------------------------------------------------- - ASP Discussion Forum Like the one on FreeVBCode.com Remote XSS Exploit - -= http://colander.altervista.org/advisory/ASPDisc.txt =- ----------------------------------------------------------------------------- -= ASP...

ASP Discussion Forum Remote XSS Attack

Hi, I found a vulnerability in ASP Discussion Forum. The vulnerability is a Remote XSS Attack. This is the original Advisory: http://colander.altervista.org/advisory/ASPDisc.txt Let me know if you want to post it up or not. Best Regards, Omni -- Email.it, the professional e-mail, gratis per te:...

CVE-2005-4549

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

CVE-2005-4550

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

CVE-2005-4550

CVE-2005-4550 affects the PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter that can contain a trailing null byte (%00). This is caused ...

CVE-2005-4549

CVE-2005-4549 describes a cross-site scripting (XSS) vulnerability in the Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the RowKeyValue parameter in the PORTAL schema and the title and content fi...

CVE-2005-4549: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

CVE-2005-4550: Undefined Security Weakness

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

FuseTalk forum XSS

The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Multiple Vulnerability In-Portal.net

Multiple Vulnerability In-Portal.net In-Portal Site Package - Price:$295 Quote: "our most popular products designed to run a successful portal or a community web site. It is equipped with the latest In-portal Platform, In-link Directory Management, In-newz News Management and In-bulletin Discussi...

ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability

ZH2003-24SA security advisory: ChitChat.NET XSS Vulnerability Published: 13 august 2003 Released: 13 august 2003 Name: ChitChat.NET Affected Systems: 2.0 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://clickcess.com/ Description Zone-h Security Team has...