AZBB 1.0.07d - Multiple Vulnerabilities

AZBB 1.0.07d - Multiple Vulnerabilities AZBB Multiple Vulnerabilities Vendor: AZBB Product: AZBB Version: = 1.0.07d Website: http://azbb.cyaccess.com/ BID: 13272 13278 CVE: CVE-2005-1200 CVE-2005-1201 OSVDB: 15700 15701 15702 15703 SECUNIA: 15013 PACKETSTORM: 37792 Description: azbb is a forum th...

AwSnap! New Hack Can Crash Chrome Browsers of Mass Audience

Few weeks back, we reported how a string of just 13 characters could cause your tab in Chrome to crash instantly. However, there was an exception that this special 13 characters string was only working on Mac OS X computers with no impact on Windows, Android, or iOS operating systems. Now, a rece...

6kbbs 8.0 Cross Site Request Forgery

6kbbs v8.0 Multiple CSRF Cross-Site Request Forgery Security Vulnerabilities Exploit Title: 6kbbs Multiple CSRF Cross-Site Request Forgery Security Vulnerabilities Vendor: 6kbbs Product: 6kbbs Vulnerable Versions: v7.1 v8.0 Tested Version: v7.1 v8.0 Advisory Publication: April 02, 2015 Latest...

6kbbs 8.0 SQL Injection

6kbbs v8.0 SQL Injection Security Vulnerabilities Exploit Title: 6kbbs Multiple SQL Injection Security Vulnerabilities Vendor: 6kbbs Product: 6kbbs Vulnerable Versions: v7.1 v8.0 Tested Version: v7.1 v8.0 Advisory Publication: April 01, 2015 Latest Update: April 01, 2015 Vulnerability Type:...

Nodesforum Remote File Inclusion Vulnerability

Nodesforum is a free PHP forum script. A remote file inclusion vulnerability exists in Nodesforum that stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to compromise the application and computer...

PT-2015-5829

Name of the Vulnerable Software and Affected Versions ocPortal versions prior to 9.0.17 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via various fields in different pages, including the title or text field in the cms calendar page to cms/index.php...

ocPortal 9.0.16 Multiply XSS Vulnerabilities

Exploit Title: ocPortal 9.0.16 Multiply XSS Vulnerabilities Google Dork: "Copyright c ocPortal 2011 " Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://ocportal.com/ Vendor contacted: 22-2-2015 Fix: http://ocportal.com/site/news/view/securityissues/xss-vulnerability-patch.htm...

CVE-2015-2677: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ocPortal before 9.0.17 allow remote authenticated users to inject arbitrary web script or HTML via the 1 title or 2 text field in the cmscalendar page to cms/index.php; unspecified fields in 3 the cmspolls page to cms/index.php or 4 a new topic...

Multiple cross-site scripting vulnerabilities in MyBB (CNVD-2015-01882)

MyBB is a PHP-based forum program. Multiple cross-site scripting vulnerabilities exist in versions of MyBB prior to 1.8.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administrative backend in MyBB aka MyBulletinBoard before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML via the 1 MIME-type field in an add action in the config-attachmenttypes module to admin/index.php; 2...

ocPortal 9.0.16 Cross Site Scripting

Exploit Title: ocPortal 9.0.16 Multiply XSS Vulnerabilities Google Dork: "Copyright c ocPortal 2011 " Date: 26-2-2015 Exploit Author: Dennis Veninga Vendor Homepage: http://ocportal.com/ Vendor contacted: 22-2-2015 Fix: http://ocportal.com/site/news/view/securityissues/xss-vulnerability-patch.htm...

Beehive Forum Cross-Site Scripting Vulnerability

Beehive Forum is a set of Web forum software based on PHP and MySQL. The software provides text filtering, user rights management and e-mail notification. A cross-site scripting vulnerability exists in the editprefs.php script in Beehive Forum version 1.4.4, which stems from the program's failure...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in editprefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 homepageurl, 2 picurl, or 3 avatarurl parameter, which are not properly handled in an error message...

CVE-2015-2198

Multiple cross-site scripting XSS vulnerabilities in editprefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 homepageurl, 2 picurl, or 3 avatarurl parameter, which are not properly handled in an error message...

CVE-2015-2198

The CVE-2015-2198 entry concerns Beehive Forum 1.4.4, where multiple XSS vulnerabilities exist in edit_prefs.php. The flaw stems from how the parameters homepage_url, pic_url, and avatar_url are handled inside error messages, allowing remote attackers to inject arbitrary script/HTML. Red Hat and ...

CVE-2015-2198: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in editprefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the 1 homepageurl, 2 picurl, or 3 avatarurl parameter, which are not properly handled in an error message...

PT-2015-5659

Name of the Vulnerable Software and Affected Versions Beehive Forum version 1.4.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via the homepage url, pic url, or avatar url parameter in edit prefs.php, which are not properly handled in an error message...

Beehive Forum 1.4.4 - Stored XSS Vulnerability

Exploit for php platform in category web applications Document Title: ============ Beehive Forum v1.4.4 Stored XSS Vulnerability Author: ============== Halil Dalabasmaz Release Date: =========== 23 Feb 2015 Product & Service Introduction: ======================== Beehive is an open-source project...

Beehive Forum 1.4.4 - Persistent Cross-Site Scripting

Beehive Forum 1.4.4 - Persistent Cross-Site Scripting Document Title: ============ Beehive Forum v1.4.4 Stored XSS Vulnerability Author: ============== Halil Dalabasmaz Release Date: =========== 23 Feb 2015 Product & Service Introduction: ======================== Beehive is an open-source project...

Beehive Forum 1.4.4 - Persistent Cross-Site Scripting

Document Title: ============ Beehive Forum v1.4.4 Stored XSS Vulnerability Author: ============== Halil Dalabasmaz Release Date: =========== 23 Feb 2015 Product & Service Introduction: ======================== Beehive is an open-source project for creating a high-configurable frame-based discussi...