vBulletin Forum Component 'forum/help' Page Cross-Site Scripting Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . Forum is one of the forum components . A cross-site scripting vulnerability exists in vBulletin, which allows remote attackers to exploit the vulnerability ...

C-BOARD Moyuku Remote Code Execution Vulnerability

C-BOARD Moyuku is a forum program. C-BOARD Moyuku is designed to properly filter user input, allowing attackers to exploit vulnerabilities to create arbitrary files and execute them...

Sql injection

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1435

Cross-site scripting XSS vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php...

CVE-2015-1434

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1434

The CVE-2015-1434 entry concerns my little forum, version 2.3.3 (and likely earlier). The advisory documents describe two vulnerable vectors in index.php: (1) SQL Injection via the edit_category parameter and via the letter parameter in admin actions, enabling arbitrary SQL execution; and (2) Cro...

PT-2015-5286

Name of the Vulnerable Software and Affected Versions my little forum versions prior to 2.3.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the back parameter to "index.php". Recommendations For versions prior to 2.3.4, update to...

PT-2015-5285

Name of the Vulnerable Software and Affected Versions my little forum versions prior to 2.3.4 Description The issue allows remote administrators to execute arbitrary SQL commands. This can be achieved via the letter parameter in a user action or the edit category parameter to "index.php"...

CVE-2015-1434: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

CVE-2015-1435: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php...

Rig Exploit Kit Source Code Leaked

A spitting match between developers of the Rig Exploit Kit and one of its resellers resulted in a partial leak of the kit’s source code in a hacker forum. Rig is less than a year old and is spread primarily in malvertising campaigns, pushing Flash, Java and Microsoft Silverlight exploits; some...

vBulletin 5.1.3 Cross Site Scripting

CVE-2014-9469 vBulletin XSS Cross-Site Scripting Security Vulnerabilities Exploit Title: vBulletin XSS Cross-Site Scripting Security Vulnerabilities Product: vBulletin Forum Vendor: vBulletin Vulnerable Versions: 5.1.3 5.0.5 4.2.2 3.8.7 3.6.7 3.6.0 3.5.4 Tested Version: 5.1.3 4.2.2 Advisory...

My Little Forum 2.3.3 Cross Site Scripting / SQL Injection

Advisory ID: HTB23248 Product: my little forum Vendor: http://mylittleforum.net/ Vulnerable Versions: 2.3.3 and probably prior Tested Version: 2.3.3 Advisory Publication: January 14, 2015 without technical details Vendor Notification: January 14, 2015 Vendor Patch: February 8, 2015 Public...

My Little Forum 2.3.3 Cross Site Scripting / SQL Injection Vulnerabilities

My Little Forum version 2.3.3 suffers from cross site scripting and remote SQL injection vulnerabilities. Product: my little forum Vendor: http://mylittleforum.net/ Vulnerable Versions: 2.3.3 and probably prior Tested Version: 2.3.3 Advisory Publication: January 14, 2015 without technical details...

Multiple Cross-Site Scripting Vulnerabilities in My Little Forum

My Little Forum is a simple WEB forum program. My Little Forum suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via various parameters...

CVE-2015-1475

Multiple cross-site scripting XSS vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 category parameter to forum.php or the 3 page or 4 order parameter to a boardentry.php or b forumentry.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 category parameter to forum.php or the 3 page or 4 order parameter to a boardentry.php or b forumentry.php...

CVE-2015-1475

Multiple cross-site scripting XSS vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 category parameter to forum.php or the 3 page or 4 order parameter to a boardentry.php or b forumentry.php...

CVE-2015-1475

My Little Forum (versions 2.3.3, 2.2, and 1.7) contains multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary script/HTML via (1) page or (2) category parameters to forum.php, or (3) page or (4) order parameters to board_entry.php or forum_entry.php. Public details...