7325 matches found
CVE-2005-1008
Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...
CVE-2005-1353
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument...
CVE-2005-0660
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...
CVE-2005-0650
Multiple cross-site scripting XSS vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 the pages parameter to divers.php incorrectly referred to as "drivers.php" by some sources, 2 in the search feature text area, 3 forum name, 4 site name or 5...
CVE-2005-0885
Multiple cross-site scripting XSS vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Mood or 2 "Send To" fields...
CVE-2005-0413
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the fid in forum.php, 2 the member parameter in member.php, 3 the email parameter in forgot.php, or 4 the nbuser or nbpass parameters in include.php. NOTE: it was later reporte...
myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof'
PHOX: myPHP v3 Final 'Sender/Poster Exploit' Content - Credits - 'sploit - Solution Credits Exploit discovered by Phox/Terencentanio/Phoxpherus of Root32. Email: [email protected] / [email protected] 'sploit There are two exploits here. 1. Posting as someone else. It's...
CVE-2005-1287
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to member.asp, 2 forum parameter to forum.asp, or 3 various parameters in register.asp...
CVE-2005-1287
BK Forum 4.0 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via (1) id parameter to member.asp, (2) forum parameter to forum.asp, or (3) various parameters in register.asp.
Multiple Sql injection vulnerabilities in BK Forum v.4
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection...
CVE-2005-1287
Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to member.asp, 2 forum parameter to forum.asp, or 3 various parameters in register.asp...
Black Knight Forum 4.0 - 'Member.asp' SQL Injection
source: https://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a...
Black Knight Forum 4.0 - Member.asp SQL Injection
Black Knight Forum 4.0 - Member.asp SQL Injection source: https://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL...
[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)
SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...
CVE-2005-1008
CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...
CVE-2005-1008
Cross-site scripting XSS vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag...
[NT] ASP-Dev Multiple Cross Site Scripting Vulnerabilities
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser. XM Forum RC3 is report...
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
ASP-DEV XM Forum RC3 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script...