Viscacha Forum CMS 0.8.1.1 SQL Injection / XSS

Title: ====== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=525 VL-ID: ===== 525 Common Vulnerability Scoring System: ==================================== 7.3 Introduction: =============...

Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities

Title: ====== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=525 VL-ID: ===== 525 Common Vulnerability Scoring System: ==================================== 7.3 Introduction: =============...

MyBB 1.6.7之前版本多个安全漏洞

BUGTRAQ ID: 53417 MyBB是一款流行的Web论坛程序。 MyBB 1.6.7之前版本在实现上存在多个安全漏洞，成功利用后可允许攻击者执行任意脚本代码、窃取Cookie身份验证凭证、控制应用、访问或修改数据或利用底层数据库中的其他漏洞并访问敏感数据。 0 MyBB 1.6.x MyBB 1.4.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...

Ramui Forum Script - query Cross-Site Scripting

Ramui Forum Script - query Cross-Site Scripting source: https://www.securityfocus.com/bid/53411/info Ramui Forum Script is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Ramui Forum Script Cross Site Scripting

Exploit Title; Ramui Forum Script Cross Site Scripting Vulnerability pixlie.php Date ; 7/5/12 Author ; 3spi0n Script Vendor or Software Link ; www.ramui.com - www.hotscripts.com/listing/ramui-forum-script/ Category ; Webapps Type ; Cross Site Scripting XSS Tested on ; Ubuntu / Win7 / Backtrack...

Ramui Forum Script - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53411/info Ramui Forum Script is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Drupal Core访问绕过漏洞(CVE-2012-1590)

Bugtraq ID: 53362 CVE ID：CVE-2012-1590 Drupal是一款开放源码的内容管理平台。 当显示论坛概览页面时应用程序不正确校验用户权限，可泄露未发表论坛帖子的部分元数据，导致敏感信息泄露。 0 Drupal 7.12 Drupal 7.11 Drupal 7.10 Drupal 7.1 厂商解决方案 Drupal 7.13已经修复此漏洞，建议用户下载使用： http://www.drupal.org/...

SA-CORE-2012-002 - Drupal core multiple vulnerabilities

Denial of Service CVE: CVE-2012-1588 Drupal core's text filtering system provides several features including removing inappropriate HTML tags and automatically linking content that appears to be a link. A pattern in Drupal's text matching was found to be inefficient with certain specially crafted...

Cross site scripting

Cross-site scripting XSS vulnerability in the cleanupurls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI...

CVE-2012-1245

Cross-site scripting XSS vulnerability in the cleanupurls function in forum/utils/html.py in OSQA before 1234, and 0.9.0 Beta 3 and earlier, allows remote attackers to inject arbitrary web script or HTML via vectors related to a crafted URI...

XM Forum - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/53292/info XM Forum is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application...

XM Forum - id Multiple SQL Injections

XM Forum - id Multiple SQL Injections source: https://www.securityfocus.com/bid/53292/info XM Forum is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

CsForum v0.8 - Cross Site Scripting Vulnerability

Title: ====== CsForum v0.8 - Cross Site Scripting Vulnerability Date: ===== 2012-04-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=496 VL-ID: ===== 496 Introduction: ============= Forum very simple installation, this script is very light and yet it has several...

CVE-2008-7309

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost userid value via a modified URL, related to a "mass assignment" vulnerability...

Woltlab Burning Board 2.22.3 [WN]KT KickTipp 3.1 - SQL Injection

Woltlab Burning Board 2.22.3 WNKT KickTipp 3.1 - SQL Injection ======================================================================================== | Title : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 remote SQL Injection | Author : Easy Laster | Script : Woltlab Burning Board 2.2 / 2....

Woltlab Burning Board 2.2 / 2.3 [WN]KT KickTipp 3.1 SQL Injection

Exploit for php platform in category web applications ======================================================================================== | Title : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 remote SQL Injection | Author : Easy Laster | Script : Woltlab Burning Board 2.2 / 2.3 WNKT...

Woltlab Burning Board 2.2/2.3 [WN]KT KickTipp 3.1 - SQL Injection

======================================================================================== | Title : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 remote SQL Injection | Author : Easy Laster | Script : Woltlab Burning Board 2.2 / 2.3 WNKT KickTipp 3.1 | Site : webnutzer.de | Price : Woltlab...

WSN Forum CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: WSN Forum CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/wsn-forum/17625/ Category:: webapps Demo : http://demo.wsnforum.com/wsnforumadmin/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...

SMF 2.0.2 Cross Site Scripting

Exploit Title : SMF 2.0.2 Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.simplemachines.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

WordPress Mingle Forum Plugin 'search' Parameter XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...