Online Discussion Forum 代码问题漏洞

Online Discussion Forum is a forum website. Itsourcecode A code issue vulnerability exists in version 1.0 of Online Discussion Forum, which stems from the parameter image in the file changeprofilepicture.php that can lead to unrestricted uploads...

CVE-2023-43194

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter...

SourceCodester Online Discussion Forum Site 跨站脚本漏洞

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An Online Discussion Forum. A cross-site scripting vulnerability exists in Online Discussion Forum Site version 1.0, which stems from cross-site scripting due to incorrect manipulation of the parameter title...

SideFX: Stored XSS in messages

The security issue described involves a stored cross-site scripting XSS vulnerability in the message functionality of the system. The vulnerability allowed an attacker to inject malicious code into messages, which could be executed when the victim viewed the message. This resulted in the attacker...

Vanilla: Stealing the ip addres from users

Hi team! Summary Pixel that steals your data. By creating an image in https://iplogger.org/ and inserting it in the forum we can steal some data ip, language, geo location of the users who see the message. Steps to reproduce + Set "wyswyg" on + Create an image from https://iplogger.org/ and use t...

CVE-2018-2476

Due to insufficient URL Validation in forums in SAP NetWeaver versions 7.30, 7.31, 7.40, an attacker can redirect users to a malicious site...

my little forum cross-site scripting vulnerability (CNVD-2019-21126)

my little forum is a set of Internet forum applications based on PHP and MySQL. The application uses a traditional tree view to display information and supports image uploading, template engine, BB code and emoticons. A cross-site scripting vulnerability exists in the Add page option in my little...

geba-online.de XSS vulnerability

Open Bug Bounty ID: OBB-636741 Description| Value ---|--- Affected Website:| geba-online.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10298

Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1diyportalview.tpl.php does not restrict the content...

Xiuno BBS Cross-Site Scripting Vulnerability

Xiuno BBS is an open source lightweight forum system. A cross-site scripting vulnerability exists in the 'sitename' parameter of the admin page in Xiuno BBS version 4.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2017-27314)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...

MyBB has multiple vulnerabilities (CNVD-2016-11614)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.8 including: SQL injectio...

500K Members of Hacking Forum Doxxed

An underground forum called Nulled.io that helped users share stolen credentials, software cracks, and leaked content was hacked earlier this month, spilling a glut of information, including users’ email addresses, encrypted passwords, and IP addresses, among other details. According to researche...

MiniBB 'index.php' Cross-Site Scripting Vulnerability

MiniBB is a free, open source Internet forum software. MiniBB suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to construct malicious URIs, trick users into parsing them, obtain sensitive cookies, hijack sessions or perform malicious operations on the...

Sql injection

Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the 1 letter parameter in a user action or 2 editcategory parameter to index.php...

Multiple Cross-Site Scripting Vulnerabilities in My Little Forum

My Little Forum is a simple WEB forum program. My Little Forum suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via various parameters...

Aborior Encore Web Forum Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10040/info Encore Web Forum is reported prone to an issue that may allow a remote user to execute arbitrary commands on a system implementing the forum software. This issue is due to the application's failure to properly...

UBUNTU-CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations...

Mobilkom Austria Cross Site Scripting

G'Day Ladies and Gents, it has been already over 3 weeks now, since they've told me they're going to fix this flaws, as soon as they've resolved more important tasks... I think they had enough time, so here is my first disclosure. Just a little, not that important non-persistent XSS. Cookie...

TR Forum 1.5 Multi Vulnerability

Exploit for php platform in category web applications ================================ TR Forum 1.5 Multi Vulnerability ================================ ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author :...