Philboard Forum Vulnerability

Philboard Vulnerability Severity : High Possible gain administrator/users access on Forum Board Systems Affected: Philboard up to v1.14 Vendor URL: http://www.youngpip.com/philboard.asp Vuln Type : Cookie Injection Status : Vendor contacted, fixed version is not available cause they didn't respon...

XMB 1.8 Partagium cross site scripting vulnerability

Hi! Lotek, a friend of mine, informed me about a cross site scripting bug1 in my XMBforum 1.8.x2: http://www.website.org/xmbforum/member.php?action=viewpro&member=3Cdiv3E3Cfont20color=22red223EMarc3C/font3E3Cscript3Ealert22Ruef22;3C/script3E3C/div3E I sent this information at Apr 25 2003 to...

Snitz Forums 2000 - register.asp SQL Injection

Snitz Forums 2000 - register.asp SQL Injection source: https://www.securityfocus.com/bid/7549/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 an...

XMB member.php Multiple Parameter SQL Injection

The remote host is running XMB Forum, a web forum written in PHP. According to its banner, this forum is vulnerable to a SQL injection bug which may allow an attacker to steal the passwords hashes of any user of this forum, including the forum administrator. Once he has the password hashes, he ca...

Multiple Vulnerabilities in Splatt Forum 4.0

=========================================================================== ==== FRAME4 SECURITY ADVISORY FSA-2003:001 --------------------------------------------------------------------------- ---- PRODUCT : Splatt Forum 4.0 for PHP-Nuke 6.0 PRODUCT/VENDOR URL : http://www.splatt.it/ TYPE :...

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Splatt Forum 'Search' function. As a result of this...

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Spla...

PHP-Nuke Splatt Forum 4.0 Module - HTML Injection

PHP-Nuke Splatt Forum 4.0 Module - HTML Injection source: https://www.securityfocus.com/bid/7484/info A problem with Splatt Forum could allow remote users to execute arbitrary code in the context of the web site running the Splatt Forum module. The problem occurs due to the lack of sanitization...

Cross site scripting in Onecenter forum 4.0

Issue : cross site scripting in Onecenter forum Affected Product : Onecenter forum 4.0 Description : Onecenter offers a free discussion forum hosted in the company's servers forum.onecenter.com . Any user in the forum is identified by a cookie that contains nick , name , mail address and password...

Onecenter Forum 4.0 - IMG Tag Script Injection

source: https://www.securityfocus.com/bid/7441/info OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum. A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosting ForumOne. The problem occurs due to the lack...

Onecenter Forum 4.0 - IMG Tag Script Injection

Onecenter Forum 4.0 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/7441/info OneCenter ForumOne 4.0 is a full-featured, web-based group discussion forum. A problem with Onecenter ForumOne could allow remote users to execute arbitrary code in the context of the web site hosti...

Battleaxe Software BTTLXE Forum - login.asp SQL Injection

Battleaxe Software BTTLXE Forum - login.asp SQL Injection source: https://www.securityfocus.com/bid/7416/info bttlxe Forum is a web-based discussion forum implemented in ASP. An SQL injection vulnerability has been reported to affect the 'login.asp' page of bttlxe Forum. The condition is reported...

Battleaxe Software BTTLXE Forum - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/7416/info bttlxe Forum is a web-based discussion forum implemented in ASP. An SQL injection vulnerability has been reported to affect the 'login.asp' page of bttlxe Forum. The condition is reportedly due to insufficient sanitization of externally supplied...

XMB Forum 1.8 - 'member.php' SQL Injection

// source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum. This is reportedly due to insufficient...

XMB Forum 1.8 - member.php SQL Injection

XMB Forum 1.8 - member.php SQL Injection // source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum...

Web Wiz Forum 6.34 - Information Disclosure

Web Wiz Forum 6.34 - Information Disclosure source: https://www.securityfocus.com/bid/7380/info Web Wiz Forum has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Forum...

Web Wiz Forum 6.34 - Information Disclosure

source: https://www.securityfocus.com/bid/7380/info Web Wiz Forum has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Forum application. Sensitive information that is...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

PHP-Nuke block-Forums.php subject vulnerabilities

The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...

PHP-Nuke 6.06.5 Forum Module - viewtopic.php SQL Injection

PHP-Nuke 6.06.5 Forum Module - viewtopic.php SQL Injection source: https://www.securityfocus.com/bid/7193/info It has been reported that an input validation error exists in the 'viewtopic.php' script included with PHPNuke as part of the Forum module. Because of this, an attacker could send a...