Sphpforum 0.4 Cross Site Scripting / SQL Injection

Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small, simple, fast and allow easy integration into...

sphpforum 0.4 - Multiple Vulnerabilities

sphpforum 0.4 - Multiple Vulnerabilities Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small,...

sphpforum 0.4 - Multiple Vulnerabilities

Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small, simple, fast and allow easy integration into...

CVE-2012-4328

Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors...

CVE-2012-4328

The affected products and versions are: vBulletin Suite 4.1.2–4.1.12 , Forum 4.1.2–4.1.12 , and the MAPI plugin 1.4.3 for vBulletin 3.x . The CVE-2012-4328 entry is described as an unspecified vulnerability with unknown impact and attack vectors; no concrete root cause, exploit details, or remedi...

CVE-2012-4328: Undefined Security Weakness

Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors...

PT-2012-5330

Name of the Vulnerable Software and Affected Versions vBulletin Suite versions 4.1.2 through 4.1.12 vBulletin Forum versions 4.1.2 through 4.1.12 vBulletin MAPI plugin version 1.4.3 for vBulletin 3.x Description The issue concerns an unspecified vulnerability in the MAPI of vBulletin products. Th...

CVE-2012-2327

MyBB aka MyBulletinBoard before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message...

phpBB v3.0.10 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------ Name : phpBB3 SQL Injection ------------------------------------------------------------------ Date : 27.07.2012...

Potential remote code execution due to embedding of old django-piston

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46819. panel The exposed atlassian api for forummodules found under forummodules/atlassian/api uses an outdated version of...

CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

Design/Logic Flaw

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

UBUNTU-CVE-2012-3391

mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...

CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

UBUNTU-CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

CVE-2012-3391

mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...

CVE-2012-3391

CVE-2012-3391 affects Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4. The issue in mod/forum/rsslib.php arises from not enforcing the posting-before-reading requirement for Q&A forums, enabling remote authenticated users (student role) to bypass access restrictions by reading the RSS feed. The ...

CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

CVE-2012-3391

mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...

CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...