EUVD-2018-18590

Malware in sbrugna...

CVE-2005-1817

Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...

CVE-2022-46890

Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum this is caused by a lack of checks performed by the /forums.php?action=post page...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

Design/Logic Flaw

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6844

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

CVE-2018-6844

CVE-2018-6844 affects MyBB 1.8.14 and represents a cross-site scripting (XSS) vulnerability exposed via the Title or Description field on the Edit Forum screen. The connected documents consistently describe this XSS in MyBB 1.8.14, but they do not provide concrete details on the underlying code p...

CVE-2018-6844: Improper Neutralization of Input During Web Page Generation

MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen...

PT-2018-17772

Name of the Vulnerable Software and Affected Versions MyBB version 1.8.14 Description The issue allows for XSS via the Title or Description field on the Edit Forum screen. Recommendations For MyBB version 1.8.14, update to a version that contains a fix for this issue...

Sql injection

Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated users to execute arbitrary SQL commands via the 1 memberid or 2 groupid parameters in a removemember action or 3 id parameter to...

PT-2012-5927

Name of the Vulnerable Software and Affected Versions Mingle Forum plugin versions prior to 1.0.33 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the memberid or groupid parameters in a "removemember" action, the id parameter to...