forum-auto.com XSS vulnerability

Open Bug Bounty ID: OBB-93426 Description| Value ---|--- Affected Website:| forum-auto.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Forum Converter Plugin - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress Forum Converter Plugin - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

Moodle 2.7.x < 2.7.10 / 2.8.x < 2.8.8 / 2.9.x < 2.9.2 Multiple Vulnerabilities

Binary data 8969.prm...

EMC RSA Archer GRC Restriction Bypass Vulnerability

EMC RSA Archer GRC is an enterprise IT governance and compliance governance product. EMC RSA Archer GRC has a security vulnerability that allows a remote attacker to bypass established access restrictions and read or modify Discussion Forum Fields messages...

Tapatalk Detection (HTTP)

HTTP based detection of Tapatalk. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.111039";...

Design/Logic Flaw

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

CVE-2015-4542

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

PT-2015-6619

Name of the Vulnerable Software and Affected Versions EMC RSA Archer GRC versions prior to 5.5.3 Description The issue allows remote authenticated users to bypass intended access restrictions. This enables them to read or modify Discussion Forum Fields messages. Recommendations For versions prior...

CVE-2015-4542: Undefined Security Weakness

EMC RSA Archer GRC 5.x before 5.5.3 allows remote authenticated users to bypass intended access restrictions, and read or modify Discussion Forum Fields messages, via unspecified vectors...

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

WordPress WP Symposium plugin 'forum_functions.php' SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.The WordPress WP Symposium plugin is a web plugin that adds social features. The WordPress WP Symposium plugin...

Discuz Full Version Stored DOM XSS Vulnerability

Discuz! is a forum program. A stored DOM XSS vulnerability exists in the full version of Discuz. Due to mishandling of the Discuz editor JS, the JS native method of fetching HTML content in ELEMENT reverses the single and double quoted entity codes that have been escaped on the server side...

SS-2015-017: Forum Module CSRF Vulnerability

More info at https://www.silverstripe.org/software/download/security-releases/ss-2015-017/...

moodle -- multiple vulnerabilities

Moodle Release Notes report: MSA-15-0030: Students can re-attempt answering questions in the lesson CVE-2015-5264 MSA-15-0031: Teacher in forum can still post to "all participants" and groups they are not members of CVE-2015-5272 - 2.7.10 only MSA-15-0032: Users can delete files uploaded by other...

commentcamarche.net XSS vulnerability

Vulnerable URL: http://www.commentcamarche.net/forum/virus-securite-7?x"...

forum.topway.org Open Redirect vulnerability

Vulnerable URL: http://forum.topway.org/sns/link.php?url=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 05.10.2015 Latest check for patch:| 05.10.2015 10:45 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Well-known Forum systems MyBB is burst 0day vulnerabilities-vulnerability warning-the black bar safety net

MyBB is very good Free Forum software, the biggest feature is simple but the functionality is surprisingly powerful. Multi-language support, may be respectively provided at the front Desk the background of the language, each user can set their own use what kind of language to access the forums,...

WordPress WP Symposium Plugin 15.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin wp-symposium Unauthenticated SQL Injection Vulnerability Date: 2015-07-30 Exploit Author: PizzaHatHacker Vendor Homepage: http://www.wpsymposium.com/ Version: ? = version = 15.5.1 Tested on: Apache / WordPress...

forum-1c.ru Open Redirect vulnerability

Vulnerable URL: http://forum-1c.ru/go.php?url=https://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 193052 Google Pagerank| 2 VIP website status:| No Check...