CVE-2005-2323

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the following parameters: (1) id in viewattach.php, (2) viewuser_id in users.php, and (3) id or (4) forum in viewforum.php. Affecte...

CVE-2005-2323

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the 1 id parameter to viewattach.php, 2 viewuserid parameter to users.php, or the 3 id or 4 forum parameter to viewforum.php...

CVE-2005-2322

Cross-site scripting XSS vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the 1 viewuserid or 2 group parameter to users.php...

YaBBSe 1.5.5c Path disclosure problem

-------------------------------------------------------------------- -------- Team priestmasters YabbSE 1.5.5c Path disclosure ---------- -------------------------------------------------------------------- Software Vendor: http://sourceforge.net/projects/yabbse/ A path disclosure vuln exist in t...

smb20b1XSS.txt

This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=JavaScript:alertdocument.cookie; =-=-=-=-=-=- XSS in...

CVE-2002-2056

CVE-2002-2056 describes a cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2, exploitable via the valid_username_online cookie to inject arbitrary script/HTML. The NVD entry assigns a MEDIUM base CVSS v2 score (AV:N/AC:M/Au:N/C:N/I:P/A:N). No exploit details or specific remediation are ...

CVE-2002-2057

CVE-2002-2057 affects TeeKai Forum 1.2. The vulnerability is described as weak encryption of web usage statistics stored in data/member_log.txt under the web document root with insufficient access control, allowing remote attackers to identify IPs visiting the site by dividing each octet by the M...

CVE-2002-2056

Cross-site scripting XSS vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the validusernameonline cookie...

CVE-2002-2054

TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...

CVE-2002-2054

CVE-2002-2054 affects TeeKai Forum 1.2. Remote attackers can authenticate as the administrator and gain privileged web forum access by setting the valid_level cookie to admin. Exploitation details are not expanded in the provided documents beyond cookie manipulation; no remediation steps are spec...

CVE-2002-2057

TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...

CVE-2002-2085

CVE-2002-2085 - WWWeBBB Forum : Affected product: WWWeBBB Forum prior to or including version 3.82 beta. Vulnerable component: page.cgi. Issue: directory traversal via a .. in an HTTP request allows reading arbitrary files. Exploitability: network attack; evidence shows impact as partial confiden...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...

CVE-2004-2178

CVE-2004-2178 : SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The affected software is a PHP-based web forum. The impact is described as arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH) . No spec...

CVE-2004-2180

Multiple cross-site scripting XSS vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the 1 country parameter to viewuser.php, 2 show parameter to viewforum.php, 3 letter parameter to viewuser.php, 4 highlight parameter to viewtopic.php, 5 show...

CVE-2004-2181

Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 page parameters to viewuser.php, or the 3 forumid parameter to viewtopic.php. NOTE: the sortby vector was later reported to be present in WowBB 1.65...

CVE-2004-2178

SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2177

Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2004-2177

CVE-2004-2177 affects DevoyBB Web Forum 1.0.0. Multiple sources (NVD, Red Hat, CVE list, OpenVAS NT/NESSUS) describe a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. OpenVAS notes additional vulnerability vectors (...