CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

Improper access control

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

The CVE-2010-0939 issue affects Visialis ABB Forum 1.1. It is caused by insufficient access control that allows remote attackers to access and download the database file fpdb/abb.mdb via a direct web request, exposing sensitive information stored under the web root. The available sources confirm ...

CVE-2009-4677

CVE-2009-4677 is an XSS vulnerability in the search.php of phpFK PHP Forum ohne 7.0.4. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. The provided documents confirm the affected product/version and the vulnerable parameter (search). No explicit ...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2010-0938

The connected documents confirm CVE-2010-0938 is an XSS in TodoOforum/Todoo Forum 2.0, where the vulnerability is triggered via the id_forum parameter in a post action. Affected component: todooforum.php. Root cause: improper handling of input leading to arbitrary script/HTML injection. Impact: r...

CVE-2009-4677: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-0938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2010-0939: Undefined Security Weakness

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

Discuz! 6.0论坛uid参数远程跨站脚本漏洞

BUGTRAQ ID: 38484 Discuz!是一款华人地区非常流行的Web论坛程序。 Discuz!论坛没有正确的过滤提交给eccredit.php页面的uid参数，远程攻击者可以通过向论坛提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中注入并执行任意HTML和脚本代码。 Comsenz Discuz! 6.0 厂商补丁： Comsenz ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.comsenz.com/index.php...

Flying Forum personal space XSS vulnerability-vulnerability warning-the black bar safety net

Article author: knowledge seekers Version: ftbbs v7. 1static installation versionseems to be the latest Vulnerable page: usercenter. asp The vulnerability occurs in the blogmid filter is not strict lead to blogmid=Checkstrrequest. form"blogmid" if blogmid"" then sql="update "&ft&"clubuser set...

My Little Forum contact.php SQL Injection

Exploit for unknown platform in category web applications ========================================= My Little Forum contact.php SQL Injection ========================================= ----------------------------Information------------------------------------------------ +Name : my little forum...

My Little Forum - contact.php SQL Injection

My Little Forum - contact.php SQL Injection ----------------------------Information------------------------------------------------ +Name : my little forum contact.php SQL Injection +Autor : Easy Laster +Date : 02.03.2010 +Script : my little forum contact.php +Download : http://mylittleforum.net/...

My Little Forum - 'contact.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : my little forum contact.php SQL Injection +Autor : Easy Laster +Date : 02.03.2010 +Script : my little forum contact.php +Download : http://mylittleforum.net/ +Demo : http://teklador.de/forum/ +Price :...

Debian DSA-1986-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in Moodle, an online course management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4297 Multiple cross-site request forgery CSRF vulnerabilities have been discovered. - CVE-2009-4298 It has be...

DECT标准密码加密绕过漏洞

Bugraq ID: 38152 DECT是数字增强型无线通讯标准。 DECT标准密码DSC加密标准存在加密绕过问题，允许攻击者恢复密钥。 攻击者可以利用漏洞破解DSC加密算法，然后读取无线设备发送到基站的加密数据，允许攻击者获得敏感信息。 针对DECT标准密码的分析将在FSE2010会议上演讲。总的来说可以在PC上在几分钟内恢复DSC的密钥，但是需要几小时获取足够多的密钥流。 DECT Forum DECT 目前没有解决方案提供： http://www.dect.org/index.aspx...

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...