80 matches found
EUVD-2006-4296
Malware in sbrugna...
EUVD-2015-1065
Malware in sbrugna...
EUVD-2023-42896
Malicious code in bioql PyPI...
CVE-2015-10051
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2006-6918
Unspecified vulnerability in the Admin login for Georgian discussion board GeoBB before 1.0 has unknown impact and attack vectors...
CVE-2024-11204: Improper Neutralization of Input During Web Page Generation
The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...
CVE-2024-10879: Improper Neutralization of Input During Web Page Generation
The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to...
CVE-2024-8428: Authorization Bypass Through User-Controlled Key
The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submitformhandler due to missing validation on the 'userid' user controlled key. This makes it possible...
WordPress Discussion Board plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-39161
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...
CVE-2023-39161 WordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...
WordPress plugin Discussion Board 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2023-39161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting XSS.This issue affects Discussion Board: from n/a through 2.4.8...
PT-2024-12774
Name of the Vulnerable Software and Affected Versions WP Discussion Board versions through 2.4.8 Description The issue affects WP Discussion Board, allowing Content Spoofing and Cross-Site Scripting XSS due to improper neutralization of script-related HTML tags in a web page. This can lead to bas...
WordPress Discussion Board Plugin <= 2.4.8 is vulnerable to Content Injection
Software Discussion Board Type Plugin Vulnerable versions = 2.4.8 Fixed in 2.4.9 OWASP Top 10 A5: Broken Access Control Classification Content Injection CVE CVE-2023-39161 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e808296acb35 Credits Abdi Pranata Required privilege...
CVE-2015-10051
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
Sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10051
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...
CVE-2015-10051 bony2023 Discussion-Board main.php display_all_replies sql injection
A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function displayallreplies of the file functions/main.php. The manipulation of the argument str leads to sql injection. The patch is identified as...