Geeklog Forum Plugin vulnerable to cross-site scripting

Overview Geeklog Forum Plugin contains a cross-site scripting vulnerability. Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. NetAgent Co., Ltd. reported this vulnerability to IPA. JPCERT/C...

Web Wiz Forum 9.5 - 'admin_group_details.asp?mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30398/info Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Unfixed XSS vulnerability at www.xgn.com.au

Security researcher doublecheck, has submitted on 27/07/2008 a cross-site-scripting XSS vulnerability affecting www.xgn.com.au, which at the time of submission ranked 3589812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2009. It is...

IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit

No description provided by source. Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB = 1.0-RC9.2 Site: icebb.net Bug: Blind SQL Injection Exploit: Session Hijacking PoC Works regardless of php.ini settings Description: IceBB is a powerful, fast, free, and open-source forum solution...

The big data library default address-vulnerability warning-the black bar safety net

data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management system...

IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit

Exploit for unknown platform in category web applications ================================================================== IceBB = 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit ================================================================== Author: GiReX 26/07/08 Homepage:...

IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking

IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB ...

IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking

Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB \ input'author''" Setting author=\ in this query: "SELECT...

Cross site scripting

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...

CVE-2008-3316

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...

CVE-2008-3316

CVE-2008-3316 concerns a cross-site scripting (XSS) vulnerability in the search feature of the Geeklog Forum Plugin (pre-2.7.1). The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors; likely related to files such as public_html/index.php, config.php, and functi...

CVE-2008-3316: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...

JVN#60419863 Geeklog Forum Plugin vulnerable to cross-site scripting

Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the...

CVE-2008-3200

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

Sql injection

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

CVE-2008-3200

CVE-2008-3200 affects Avlc Forum via SQL injection in the vlc_forum.php script, specifically the affich_message action using the id parameter. Root cause: improper handling of user-supplied id leads to arbitrary SQL execution. Impact: remote attacker could read/modify data and affect other databa...

CVE-2008-3200

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

CVE-2008-3200: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

Design/Logic Flaw

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...

CVE-2008-2583

CVE-2008-2583 affects Oracle Portal’s sample Discussion Forum Portlet (Oracle Application Server 10g). The vulnerability resides in the Discussion Forum Portlet distributed via OTN prior to 20080715, enabling remote exploitation over a network with unknown impact per the initial description, but ...