CVE-2005-1008

Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...

CVE-2002-2190

ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file...

CVE-2005-1817

Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...

CVE-2002-2085

Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...

CVE-2005-4256

Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...

CVE-2007-6241

Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...

CVE-2006-7188

The search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows remote attackers to read internal forum posts via certain requests, possibly related to the $info'forum' variable...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110: Improper Neutralization of Input During Web Page Generation

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

CVE-2025-44110

FluxBB version 1.5.11 is vulnerable to Cross Site Scripting (XSS) due to improper handling of the Forum Description Field in the admin_forums.php file. This flaw allows for the potential execution of malicious scripts by an attacker. To remediate this, users should update to a patched version of ...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

Fluxbb 安全漏洞

Fluxbb is a Php-based forum system organized by Fluxbb. A security vulnerability exists in Fluxbb version 1.5.11, which stems from the Forum Description Field in adminforums.php being vulnerable to cross-site scripting attacks...

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

📄 ezPortal 5.6 SQL Injection

ezPortal version 5.6 for Simple Machines Forum suffers from a SQL injection issue that may be exploitable. Exploit Title: ezportal Advisory Portal Mod for SMF Local SQL injection Google Dork: inurl:index.php?action=ezportal Date: 2025-05-08 Exploit Author: Emiliano Febbi Vendor Homepage:...

CVE-2025-39514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Asgaros Asgaros Forum asgaros-forum allows Stored XSS.This issue affects Asgaros Forum: from n/a through = 3.2.1...

CVE-2025-31118

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature viewtopic.php does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction,...

DS-Java 安全漏洞

DS-Java is a forum system built on SSH Struts2+Spring+Hibernate by sixteen individual developers. A security vulnerability exists in DS-Java version 1.0, which stems from vulnerability to cross-site request forgery attacks...

inclusionforum.global Cross Site Scripting vulnerability OBB-4047448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...