CVE-2005-2430

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 forumid or 2 groupid parameter to forum.php, 3 projecttaskid parameter to task.php, 4 id parameter to detail.php, 5 the text field on the search page, 6 groupid...

CVE-2005-2423

Beehive Forum allows remote attackers to obtain sensitive information via 1 an invalid finaluri or sortby parameter to index.php or a direct request to 2 admin.php, 3 attachments.inc.php, 4 banned.inc.php, 5 beehive.inc.php, 6 constants.inc.php, 7 db.inc.php, 8 dictionary.inc.php or 9...

CVE-2005-2422

CVE-2005-2422 describes a cross-site scripting (XSS) vulnerability in the Beehive Forum, specifically in index.php where the webtag parameter can be exploited to inject arbitrary script/HTML. The affected component is the Beehive Forum’s index.php handling the webtag parameter; the root cause is ...

CVE-2005-2421

Technical details about CVE-2005-2421 are not publicly available in the provided connected documents. Monitor for updates to identify affected products, root cause, impact, and fixes.

CVE-2005-2430

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 forumid or 2 groupid parameter to forum.php, 3 projecttaskid parameter to task.php, 4 id parameter to detail.php, 5 the text field on the search page, 6 groupid...

CVE-2005-2423

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, vulnerable components, impact, and remediation.

CVE-2005-2421

Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter...

CVE-2005-2423

Beehive Forum allows remote attackers to obtain sensitive information via 1 an invalid finaluri or sortby parameter to index.php or a direct request to 2 admin.php, 3 attachments.inc.php, 4 banned.inc.php, 5 beehive.inc.php, 6 constants.inc.php, 7 db.inc.php, 8 dictionary.inc.php or 9...

CVE-2005-2422

Cross-site scripting XSS vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web script or HTML via the webtag parameter...

CVE-2005-2421

Multiple SQL injection vulnerabilities in index.php and other pages in Beehive Forum allow remote attackers to execute arbitrary SQL commands via the webtag parameter...

Advisory 12/2005: UseBB Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: UseBB Multiple Vulnerabilities Release Date: 2005/07/28 Last Modified: 2005/07/28 Author: Stefan Esser [email protected] Application: UseBB = 0.5.1 Severity: Multiple S...

Cross Site Scripting vulnerabilities in GForge

--------------------------------------------------------------------------- Various Vulnerabilities in GForge --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005 Location: Basque Country...

VBZoom 1.01.11 - login.php?UserID Cross-Site Scripting

VBZoom 1.01.11 - login.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

VBZoom 1.0/1.11 - 'login.php?UserID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

VBZoom 1.0/1.11 - 'profile.php?Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

beehiveVulns.txt

-------------------------------------- Beehive Forum Multiple Vulnerabilities -------------------------------------- Beehive Forum is affected by sql injection, xss, and path disclosure. Vulnerabilities --------------- 1 The $GET "webtag" parameter is on almost every page of the product and is...

VBZoom Forum 1.11 - 'show.php' SQL Injection

source: https://www.securityfocus.com/bid/14383/info VBZooM Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CVE-2005-2322

Cross-site scripting XSS vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the 1 viewuserid or 2 group parameter to users.php...

CVE-2005-2323

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the 1 id parameter to viewattach.php, 2 viewuserid parameter to users.php, or the 3 id or 4 forum parameter to viewforum.php...

CVE-2005-2322

CVE-2005-2322 describes a cross-site scripting (XSS) vulnerability in the PHP-based forum software Class-1 Forum (versions 0.24.4 and 0.23.2) and in Clever Copy when used with forums. According to the provided documents, the issue allows remote attackers to inject arbitrary web script or HTML by ...