Tapatalk plugin for MyBB SQL Injection Vulnerability

Tapatalk plugin for MyBB is a set of forum browsing plugins for MyBB from Tapatalk, Inc. A SQL injection vulnerability exists in Tapatalk plugin for MyBB versions prior to 4.5.8. A remote attacker can inject arbitrary SQL commands using XML-RPC encrypted documents...

phpbb Cross Site Scripting Vulnerability

phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. phpBB has a cross-site scripting vulnerability. Attackers can use this...

MyBB Remote Code Execution Vulnerability (CNVD-2017-01011)

MyBB is a popular forum program. MyBB suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

FUDforum 3.0.6 - Cross-Site Scripting Cross-Site Request Forgery

FUDforum 3.0.6 - Cross-Site Scripting Cross-Site Request Forgery Security Advisory - Curesec Research Team 1. Introduction Affected Product: FUDforum 3.0.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://fudforum.org/forum/ Vulnerability Type: XSS, Login CSRF Remote Exploitable...

FUDforum 3.0.6 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

FUDforum version 3.0.6 suffers from cross site request forgery and cross site scripting vulnerabilities. 1. Introduction Affected Product: FUDforum 3.0.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://fudforum.org/forum/ Vulnerability Type: XSS, Login CSRF Remote Exploitable:...

MyBB 1.8.6 Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 01/29/2016 Disclosed...

MyBB 1.8.6 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 01/29/20...

MyBB 1.8.6 - SQL Injection

MyBB 1.8.6 - SQL Injection Security Advisory - Curesec Research Team 1. Introduction Affected Product: MyBB 1.8.6 Fixed in: 1.8.7 Fixed Version Link: http://resources.mybb.com/downloads/mybb1807.zip Vendor Website: http://www.mybb.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes...

Advanced Electron Forum Cross-Site Scripting Vulnerability

Advanced Electron Forum is an online forum system written in PHP. Advanced Electron Forum suffers from a stored cross-site scripting vulnerability that could be exploited by attackers to conduct cross-site scripting attacks...

Vbulletin 5.x - Remote Code Execution Exploit (PL)

Document Title: =============== Vbulletin 5.x - Remote Code Execution Exploit PL References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1651 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1651 Comm...

Discuz Full Version Stored DOM XSS Vulnerability

Discuz! is a forum program. A stored DOM XSS vulnerability exists in the full version of Discuz. Due to mishandling of the Discuz editor JS, the JS native method of fetching HTML content in ELEMENT reverses the single and double quoted entity codes that have been escaped on the server side...

Well-known Forum systems MyBB is burst 0day vulnerabilities-vulnerability warning-the black bar safety net

MyBB is very good Free Forum software, the biggest feature is simple but the functionality is surprisingly powerful. Multi-language support, may be respectively provided at the front Desk the background of the language, each user can set their own use what kind of language to access the forums,...

Nodesforum Remote File Inclusion Vulnerability

Nodesforum is a free PHP forum script. A remote file inclusion vulnerability exists in Nodesforum that stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to compromise the application and computer...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the 1 page or 2 category parameter to forum.php or the 3 page or 4 order parameter to a boardentry.php or b forumentry.php...

phpBB CSS Injection Vulnerability

phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. A CSS injection vulnerability exists in phpBB, which arises from the...

phpBB Cross-Site Request Forgery Vulnerability

phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. phpBB cross-site request forgery vulnerability allows attackers to exploit...

MyBB 1.8.2 /inc/class_core.php 代码执行漏洞

No description provided by source...

MyBB 1.8.X - Multiple Vulnerabilities

Latest MyBB forum software suffers on multiple vulnerabilities, including SQL Injection and Cross Site Scripting. Such bugs may allow attacker to perform remote sql queries against the database, and so on. Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2...

MyBB 1.8.x - Multiple Vulnerabilities

MyBB 1.8.x - Multiple Vulnerabilities Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2 / PHP 5 localhost Vendor: mybb.com Version: = 1.8.1 - Latest ATM Contact: [email protected] Author: Smash Latest MyBB forum software suffers on multiple...

vBulletin 5.1.x - Persistent Cross-Site Scripting

vBulletin 5.1.x - Persistent Cross-Site Scripting Title: vBulletin 5.1.X - Cross Site Scripting Date: 05.09.14 Version: = 5.1.2 Latest ATM Vendor: vbulletin.com Contact: smash at devilteam.pl 1 Agenda Latest vBulletin forum software suffers on persistent cross site scripting vulnerability, which...