7884 matches found
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser. XM Forum RC3 is report...
ASP-DEV XM Forum RC3 - IMG Tag Script Injection
ASP-DEV XM Forum RC3 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script...
CVE-2005-0885
Multiple cross-site scripting XSS vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Mood or 2 "Send To" fields...
CVE-2005-0885
XMB Forum 1.9.1 is affected by multiple XSS vulnerabilities (via the Mood and “Send To” fields). Exploitation could allow remote script injection in the context of the affected forum pages. The CVE-2005-0885 entry is corroborated by multiple sources (NVD/NIST and CVE list). The provided documents...
CVE-2005-0885: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in XMB Forum 1.9.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Mood or 2 "Send To" fields...
XMB Forum < 1.9.10 Multiple Vulnerabilities
The remote host is running XMB Forum, a web forum written in PHP. According to its banner, the version of XMB installed on the remote host suffers from cross-site scripting, SQL injection, and input validation vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
XMB Forum < 1.9.8 SQL Injection and XSS Vulnerabilities
Binary data 2747.prm...
phpBB <= 2.0.12 Change User Rights Authentication Bypass
No description provided by source. !/usr/bin/perl -w phpBB =2.0.12 session autologin exploit This script uses the vulerability in autologinid variable More: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=267563 Just gives an user on vulnerable forum administrator rights. You should register the...
myPHP Forum v1, 2 & 3
PHOX: myPHP Forum v1, 2 & 3 Exploits Content - Credits - SMFDBPWNOCS - Solution - Contact Credits Exploit discovered by Phoxpherus Phorce, Phox R&P, Terencentanio Root32 SMFDBPWNOCS - Stupid Mofo Database Spamming When No One Can See In short, forum.php and topic.php have no validation checks. Th...
yabbXSS.txt
PersianHacker.NET 200503-08 YaBB2 rc1 XSS Vulnerability Date: 2005 March Bug Number: 08 bid:12756 YaBB is a leading free forum software package that rivals any professional message board out there. It provides a real-time chat and support system for your visitors. More info @:...
CVE-2005-0700
The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...
CVE-2005-0700
The CVE-2005-0700 entry affects Aztek Forum 4.0, where the export_index action in myadmin.php can be exploited by remote attackers to obtain database files, potentially by setting the ATK_ADMIN cookie. The available description states the vulnerability allows access to database files and indicate...
CVE-2005-0700: Undefined Security Weakness
The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...
CVE-2005-0702: Undefined Security Weakness
SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages...
Aztek Forum myadmin.php Admin Authentication Bypass
Binary data 2679.prm...
CVE-2005-0660
CVE-2005-0660 affects D-Forum 1.11 with multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via certain fields, demonstrated using the page parameter in nav.php3. NVD notes network attack vector, medium complexity, no authenticati...
CVE-2005-0700
The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...
CVE-2005-0660
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
Exploit for unknown platform in category web applications ======================================================== Aztek Forum include include include include include include include include include define REQ1 "/myadmin.php?action=exportindex&login=" define REQ2 " HTTP/1.1\nHost: " define REQ3...
CVE-2005-0660: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3...