Snitz Forum 2000 - 'post.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

CVE-2005-3361

Cross-site scripting XSS vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306...

ASP Fast Forum - error.asp Cross-Site Scripting

ASP Fast Forum - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities

---------------------------------------------------------------------- SNS Advisory No.85 XOOPS Multiple Cross-site Scripting Vulnerabilities Problem first discovered on: Sun, 25 Sep 2005 Published on: Tue, 25 Oct 2005 ---------------------------------------------------------------------- Severit...

Nuked klan 1.7: Bypassed level admin on forum(corrected)

mail/msn: [email protected] remplace THREADID id of the thread that you want to see remplace FORUMID id of the forum in which your thread is that allow you to view the post level admin http://target/index.php?file=Forum&page=viewtopic&forumid=FORUMID' OR id LIKE '' /&threadid=THREADID' AND...

Nuked klan 1.7: SQL vulnerability

mail/msn: [email protected] FORUM http://127.0.0.1/nk/index.php?file=Forum&page=viewtopic&forumid='SQL&threadid='SQL LINK http://127.0.0.1/nk/index.php?file=Links&op=description&linkid='SQL ARTICLES http://127.0.0.1/nk/index.php?file=Sections&op=article&artid='SQL TELECHARGEMENT...

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

CVE-2005-3282

CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

Nuked klan 1.7: XSS vulnerability

mail/msn: [email protected] ====================================== Sreach Module Mots clйs & Auteur : "XSS ====================================== ====================================== Guestbook Module exec in edit URL "XSS Commentair /textareaXSS ======================================...

Chipmunk Forum - 'quote.php?forumID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15149/info Chipmunk products are prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

wagora420_xpl.txt

W-agora 4.2.0 Remote code execution / cross site scripting poc exploit software: site: http://w-agora.net/en/index.php description: "W-Agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other information on you...

Multiple Vulnerability In-Portal.net

Multiple Vulnerability In-Portal.net In-Portal Site Package - Price:$295 Quote: "our most popular products designed to run a successful portal or a community web site. It is equipped with the latest In-portal Platform, In-link Directory Management, In-newz News Management and In-bulletin Discussi...

For Discuz Forum, the intrusion-vulnerability warning-the black bar safety net

Recently nothing else, the rookie, set off a Discuz Forum, the invasion of the frenzy of the“movement.” Time trouble the entire security community is boiling endless. However, the site of the webmasters skill fairly agile, low version of the Discuz Forum also useless how long, will be put on a...

SEO borad: SQL injection

Product: SEO-Board Version: 1.02 Author: Hristo Hristov URL: http://seo-board.com VULNERABILITY CLASS: SQL injection through cookie PRODUCT DESCRIPTION SEO-Board is a forum software that's fast, free, and search engine friendly. It is written in PHP and use MySQL database. VULNERABILITY Vulnerabl...

CVE-2005-3085

Multiple cross-site scripting XSS vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 forum or 2 topic parameters...

CVE-2005-3073

Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the 1 "mike", 2 "standard", or 3 "foundation" demo, allows attackers to inject Interchange Tag Language ITL elements into the forum/submit.html page...

CVE-2005-3073

Interchange 5.0.1 has an unspecified vulnerability that, when a catalog is created with the demo suites (mike, standard, or foundation), allows injection of Interchange Tag Language (ITL) elements into the forum/submit.html page. Affected products/versions include Interchange 4.9.3, 5.0 before 5....

My Little Forum 1.5 / 1.6beta SQL Injection

My Little Forum 1.5 / 1.6beta SQL Injection software: site: http://www.mylittlehomepage.net/mylittleforum software: "A simple web-forum that supports classical thread view message tree as well as messagebord view to display the messages. Requires PHP 4.1 and a MySQL database." 1 look at the...

My Little Forum 1.5 / 1.6beta SQL Injection

My Little Forum 1.5 / 1.6beta SQL Injection software: site: http://www.mylittlehomepage.net/mylittleforum software: "A simple web-forum that supports classical thread view message tree as well as messagebord view to display the messages. Requires PHP 4.1 and a MySQL database." 1 look at the...