My Little Forum 1.3 - email.php Cross-Site Scripting

My Little Forum 1.3 - email.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9286/info my little forum is prone to a cross-site scripting vulnerability in the 'email.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input...

Invision Power Board SQL Injection Vuln [ All Versions ]

Vendor : Invision Power Services URL : http://www.invisionpower.com Version : All Versions Up To v2.0 Alpha 3 Risk : SQL Injection Vulnerability Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking...

Web Wiz Forum 6.34/7.0/7.5 - Unauthorized Private Forum Access

source: https://www.securityfocus.com/bid/8957/info A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote' mode. When this mode is used, Web Wiz Forum will allegedly fa...

[Full-Disclosure] Unauthorized access in Web Wiz Forum

Unauthorized access in Web Wiz Forum A vulnerability has found in Web Wiz Forum 6.34, 7.01, 7.5. Remote user authenticated or not can read message in private forum. Remote user can post message in private forum. Software does not compare message to forum, when "quote" mode is used. In result,...

Web Wiz Forum 6.347.07.5 - Unauthorized Private Forum Access

Web Wiz Forum 6.347.07.5 - Unauthorized Private Forum Access source: https://www.securityfocus.com/bid/8957/info A vulnerability has been reported in Web Wiz Forum that could allow unauthorized access to private forums. The problem occurs when handling malformed requests that make use of 'quote'...

Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threads

-------------------------------------------------------------------- Virginity Security Advisory 2003-002 - - - -------------------------------------------------------------------- DATE : 2003-10-31 22:59 GMT TYPE : remote VERSIONS AFFECTED : == Tritanium Bulletin Board 1.2.3...

GeekLog 1.3.x - HTML Injection

GeekLog 1.3.x - HTML Injection source: https://www.securityfocus.com/bid/8792/info Geeklog has been reported prone to multiple HTML Injection vulnerabilities. The issues have been reported to present themselves due to a lack of sufficient sanitization performed on data that is parsed from forum...

GeekLog 1.3.x - HTML Injection

source: https://www.securityfocus.com/bid/8792/info Geeklog has been reported prone to multiple HTML Injection vulnerabilities. The issues have been reported to present themselves due to a lack of sufficient sanitization performed on data that is parsed from forum interface form fields. It has be...

GuppY 2.4 - HTML Injection

source: https://www.securityfocus.com/bid/8717/info It has been reported that one of the scripts included with GuppY is vulnerable to an HTML injection attack. The script, "postguest.php", does not perform input validation to prevent the inclusion of HTML/script content in messages posted to the...

Re-Boot Design ASP Forum SQL injection Vulnerability

Re-Boot Design ASP Forum SQL injection Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Re-Boot Design ASP Forum Version 1.01 Vendor: http://www.re-bootd.com Issue: attackers can access users accounts without them knowing their passwords. Description:...

vBulletin Multiple Cross Site Scripting Vulnerabilities

SYSTEMS AFFECTED ======== Jelsoft Enterprises vBulletin Forum exploited with a browser CONTENTS ========= Subject: vBulletin Multiple Cross Site Scripting Vulnerabilities Date: 17 September 2003 release from old archive, flaws found on 7 September 2002 Risk: Low DESCRIPTION ========= The vBulleti...

EZsite Forum Discloses Passwords to Remote Users

The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the 'Database/EZsiteForum.mdb' file. A remote user can reportedly download this database. %NASLMINLEVEL 70300 This script written by deepquest Ref: Date: 4 sep , 2003...

CVE-2003-0590

Cross-site scripting XSS vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon imagesubject field...

ZH2003-24SA (security advisory): ChitChat.NET XSS Vulnerability

ZH2003-24SA security advisory: ChitChat.NET XSS Vulnerability Published: 13 august 2003 Released: 13 august 2003 Name: ChitChat.NET Affected Systems: 2.0 Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://clickcess.com/ Description Zone-h Security Team has...

XSS in Tek-Tips Forum

hello 3APA3A ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 11.08.2003 Name: Tek-Tips Forum Web Site: www.tek-tips.com Bug: XSS Vulnerability. Exploitexaple:...

Clickcess ChitChat.NET - topic title Cross-Site Scripting

Clickcess ChitChat.NET - topic title Cross-Site Scripting source: https://www.securityfocus.com/bid/8417/info It has been reported that a html injection issue exists in the Clickcess ChitChat.NET discussion forum software. The vulnerability is reported to be present in the Name and Topic Title te...

CVE-2003-0483

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...

Invision Board spoof and defacement

-INTRO- All versions of Invisions Board have a flaw in their input filtering that allows an attacker to completely mess up Invision's display and in one case I managed to change the URL of some of the forums links, which could be used to refer users to fake login sites to collect passwords etc...

PBLang Cross Site Scripting Vulnerability (Newest version)

PBLang is a PHP-base forum. A security hole has just found in this product allows an attacker to steals cookies or does many things… |--------------------------------------------| Vulnerable systems: PBLang Forum Version: 4.56 4.5 RC 2 Website: http://pblang.drmartinus.de/ Problem: Cross Site...

PBLang Forum XSS Vul

PBLang is a web forum written by PHP language. A security vulnerability in the product allows posting of HTML code and JavaScript into existing web pages thus causing it to be executed on the client end a Cross-Site Scripting vuln. |--------------------------------------------| Vulnerable systems...