7325 matches found
Snitz Forum < 3.4.05 HTTP Response Splitting
Binary data 2302.prm...
YaBB 1.x9.1.2000 - YaBB.pl IMSend Cross-Site Scripting
YaBB 1.x9.1.2000 - YaBB.pl IMSend Cross-Site Scripting source: https://www.securityfocus.com/bid/11215/info A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script. As a result, it is possible for a remote attacker to create a malicious link to the affected page of a...
YaBB 1.x/9.1.2000 - Administrator Command Execution
source: https://www.securityfocus.com/bid/11214/info It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands. This issue permits a remote attacker to create a...
YaBB 1.x/9.1.2000 - 'YaBB.pl IMSend' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11215/info A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script. As a result, it is possible for a remote attacker to create a malicious link to the affected page of a site hosting the web forum. The malicious link may conta...
CVE-2004-0036
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter...
CVE-2004-0036
CVE-2004-0036 describes a SQL injection in calendar.php for vBulletin Forum 2.3.x before 2.3.4, exploitable via the eventid parameter to exfiltrate data. Affected component is the calendar feature in vBulletin 2.3.x; root cause is improper input handling in eventid. Impact stated: attackers can s...
Powie's PSCRIPT Forum fails to filter user posts
Overview Powie's PSCRIPT Forum fails to properly sanitize user input, which allows an attacker to create a user profile that can execute arbitrary scripts in a victim's web browser when the victim views the profile. Description Powie's PSCRIPT Forum is an online forum application written in PHP...
Powie PHP Forum < 1.15 Multiple Vulnerabilities
Binary data 1732.prm...
Siteman forum.php page Parameter XSS
Binary data 2527.prm...
Simple Machines Forum %lt; 1.1.4 / 1.0.12 SQL Injection
Binary data 4574.prm...
Snitz Forums 2000 < 3.4.03 register.asp Email Parameter SQL Injection
The remote host is using Snitz Forum 2000. This version allows an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out...
XSS в разных форумах
Здравствуйте, 3APA3A. играясь с е107 обнаружил следующее: forum проверено на версии 6.12 возможность вставки BBCode URL=http://some.url"style="position:absolute;left:220px;top:10px;"size=14test /size/URL проверенный:...
BoardPower Forum - ICQ.cgi Cross-Site Scripting
BoardPower Forum - ICQ.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/10734/info BoardPower Forum is reportedly affected by a cross-site scripting vulnerability in the icq.cgi script. This issue is due to a failure of the application to properly sanitize user-supplied URI inpu...
BoardPower Forum - 'ICQ.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10734/info BoardPower Forum is reportedly affected by a cross-site scripting vulnerability in the icq.cgi script. This issue is due to a failure of the application to properly sanitize user-supplied URI input. A remote attacker can exploit this issue by...
[Full-Disclosure] XSS in Board Power forum
Programm: Board Power forum v2.04 PF Autor: Ivan Zhdanov CRITICAL: Low Exploit: http://target/cgi-bin/boardpower/icq.cgi?action=scriptjavascript:alert 'hello';/script URL: http://www.thewebmasterforums.com ...... Maxpatrol - Professional Network Security Scanner www.maxpatrol.com. Full-Disclosure...
LDU (land down under) xss vulnerability
About Product ============= LDU is a php/mysql website engine. Description =========== A cross site scripting vulnerability exist in the BBcodes of the LDU forum. When you add a image to your message on the forum, the script doesn't check if it is javascript. I will give the following proof of...
CVE-2004-1996
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.0 allows remote attackers to inject arbitrary web script via the size tag...
SMF SIZE Tag Script Injection Vulnerability
Advisory Name : SMF SIZE Tag Script Injection Vulnerability Release Date : May 3,2004 Application : Simple Machines Test On : SMF 1.0 Beta 5 Public Vendor URL : http://www.simplemachines.org/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: The team that has brought you YaBB SE has moved on to...
Simple Machines Forum (SMF) 1.0 - Size Tag HTML Injection
Simple Machines Forum SMF 1.0 - Size Tag HTML Injection source: https://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser...
Simple Machines Forum (SMF) 1.0 - Size Tag HTML Injection
source: https://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser. The issue exists due to insufficient sanitization of...