Lucene search
+L

1275 matches found

NVD
NVD
•added 2005/12/28 11:03 a.m.•21 views

CVE-2005-4549

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

4.3CVSS5.4AI score0.02741EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2005/12/28 11:00 a.m.•30 views

CVE-2005-4550

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

6.5AI score0.06092EPSS
SaveExploits2References6
CVE
CVE
•added 2005/12/28 11:00 a.m.•52 views

CVE-2005-4550

CVE-2005-4550 affects the PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter that can contain a trailing null byte (%00). This is caused ...

5CVSS6.1AI score0.06092EPSS
SaveExploits2References6Affected Software1
CVE
CVE
•added 2005/12/28 11:00 a.m.•70 views

CVE-2005-4549

CVE-2005-4549 describes a cross-site scripting (XSS) vulnerability in the Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the RowKeyValue parameter in the PORTAL schema and the title and content fi...

4.3CVSS5.6AI score0.02741EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/28 12:00 a.m.•6 views

CVE-2005-4549: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

4.3CVSS6AI score0.02741EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/12/28 12:00 a.m.•7 views

CVE-2005-4550: Undefined Security Weakness

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

5CVSS5.9AI score0.06092EPSS
SaveExploits2References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•26 views

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. OpenVAS Vulnerability Test $I...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•20 views

PunBB detection

The remote web server contains a database management application written in PHP. Description : This script detects whether the remote host is running PunBB and extracts the version number and location if found. PunBB is an open-source discussion board written in PHP. SPDX-FileCopyrightText: 2005...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•58 views

FuseTalk forum XSS

The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

4.3CVSS6.8AI score0.0127EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2005/10/13 12:00 a.m.•45 views

Multiple Vulnerability In-Portal.net

Multiple Vulnerability In-Portal.net In-Portal Site Package - Price:$295 Quote: "our most popular products designed to run a successful portal or a community web site. It is equipped with the latest In-portal Platform, In-link Directory Management, In-newz News Management and In-bulletin Discussi...

7.2AI score
SaveExploits0
myhack58
myhack58
•added 2005/09/23 12:00 a.m.•44 views

Foreign hackers resources-vulnerability warning-the black bar safety net

allhack.com This website provides a library and a download area. The library for beginners provides hacking knowledge and computer technology basics. The download area includes the Scan Tool, FLOOD tool, decryption tools, denial of service attacks and the like. alw. nih,gov In the security...

0.2AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/08/31 12:00 a.m.•53 views

PunBB BBCode IMG Tag Script Injection Vulnerability

--------------------------------------------------------------------------- PunBB BBCode IMG Tag Script Injection Vulnerability --------------------------------------------------------------------------- Author: y3dips Date: August, 20th 2005 Location: Indonesia, Jakarta Web:...

7.6AI score
SaveExploits0
securityvulns
securityvulns
•added 2005/08/09 12:00 a.m.•28 views

SQL IN Open Bulletin Board

Class: Input Validation Error Remote: Yes Local: Yes Credit: ABDUCTER ---- [email protected] OR [email protected] Vulnerable: Powered by Open Bulletin Board ALL VERSION info :- openbb is APOPULAR FORUM HAVE MANY VERSION U CAN FIND SOURCE OF FORUM IN http://www.openbb.com/ discussi...

0.5AI score
SaveExploits0
NVD
NVD
•added 2005/05/02 4:00 a.m.•28 views

CVE-2005-1076

Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...

4.3CVSS5.6AI score0.01372EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2005/04/12 12:00 a.m.•30 views

WebCT 4.1 vulnerable to XSS attacks

The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...

0.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/12 12:00 a.m.•5 views

CVE-2005-1076: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...

4.3CVSS6AI score0.01372EPSS
SaveExploits2References1
Packet Storm
Packet Storm
•added 2005/01/28 12:00 a.m.•40 views

antivir.txt

NOTE: Already posted to vuln-dev. Because I'm not receiving comments, I believe that this one is real. Dear list, please inspect the following, your input is welcome. Vendors Microsoft and unspecified AV company are contacted two months ago, I'm not satisfied with their response and here is the...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2004/12/13 12:00 a.m.•28 views

PunBB Detection

The remote host is running PunBB, an open source discussion board written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15936; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"PunBB Detection";...

6.9AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2004/12/08 5:00 a.m.•41 views

CVE-2004-1064

The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute...

6.1AI score0.03735EPSS
SaveExploits0References12
securityvulns
securityvulns
•added 2003/08/26 12:00 a.m.•41 views

[UNIX] DCForum+ XSS Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

6.2AI score
SaveExploits0
Rows per page
Query Builder