Cross site scripting

Simple Machines Forum SMF through 2.0.5 has XSS...

CVE-2013-4395

Simple Machines Forum SMF through 2.0.5 has XSS...

PT-2020-7497

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions through 2.0.5 Description: The issue affects Simple Machines Forum, allowing for cross-site scripting XSS attacks. Recommendations: For versions through 2.0.5, update to a version that contains a fix for thi...

CVE-2013-4395: Improper Neutralization of Input During Web Page Generation

Simple Machines Forum SMF through 2.0.5 has XSS...

CVE-2012-6721

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Forum, 2 Event, and 3 Classifieds plugins in SocialEngine before 4.2.4...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Forum, 2 Event, and 3 Classifieds plugins in SocialEngine before 4.2.4...

CVE-2012-6721

CVE-2012-6721 describes multiple CSRF vulnerabilities in the SocialEngine platform, affecting the (1) Forum, (2) Event, and (3) Classifieds plugins when running versions earlier than 4.2.4. The connected documents provide the concrete details: the vulnerable software components are the three Soci...

Vanilla cross-site scripting vulnerability (CNVD-2020-04666)

Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla version 2.6.3 in index.php?p = / dashboard / settings / branding. The vulnerability stems from a lack of proper validation of client-side data in the web application. A...

PT-2020-7324

Name of the Vulnerable Software and Affected Versions: SocialEngine versions prior to 4.2.4 Description: The issue concerns multiple cross-site request forgery CSRF vulnerabilities found in the Forum, Event, and Classifieds plugins. CSRF is a type of attack where an attacker tricks a user into...

CVE-2012-6721: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Forum, 2 Event, and 3 Classifieds plugins in SocialEngine before 4.2.4...

destination-canada-forum-emploi.ca Cross Site Scripting vulnerability

Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting destination-canada-forum-emploi.ca website and its users...

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

Arbitrary file deletion

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

CVE-2013-0192

CVE-2013-0192 affects Simple Machines Forum (SMF) up to version 2.0.3. The vulnerability is a file disclosure that enables a forum admin to read sensitive files, such as the database configuration, indicating insufficient access restrictions when handling file operations. The available sources (N...

PT-2020-7326

Name of the Vulnerable Software and Affected Versions: SimpleMachines Forum versions prior to 2.0.4 Description: The issue allows a forum admin to read sensitive files, including the database configuration file. Recommendations: For SimpleMachines Forum versions prior to 2.0.4, update to version...

CVE-2013-0192: Exposure of Sensitive Information to an Unauthorized Actor

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

Sodinokibi Ransomware Group Sponsors Hacking Contest

White hats aren’t alone in holding hacking contests. Russian-language cybercriminals are known for running similar competitions on underground forums. However, an analysis of Dark Web activity has uncovered a trend towards offering increasingly high-stakes prizes during such battles. At the same...

Sprint Exposed Customer Support Site to Web

Fresh on the heels of a disclosure that Microsoft Corp. leaked internal customer support data to the Internet, mobile provider Sprint has addressed a mix-up in which posts to a private customer support community were exposed to the Web. KrebsOnSecurity recently contacted Sprint to let the company...