7173 matches found
CVE-2008-3392
Cross-site request forgery CSRF vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to logoffuser.asp...
CVE-2008-3391
Multiple cross-site scripting XSS vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to 1 admingroupdetails.asp and 2 admincategorydetails.asp...
CVE-2008-3392
Cross-site request forgery CSRF vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to logoffuser.asp...
CVE-2008-3391
CVE-2008-3391: Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary script/HTML via the mode parameter to admin_group_details.asp and admin_category_details.asp. Affected product is Web Wiz Forum 9.5; the underlying issue is XSS via u...
CVE-2008-3392
CVE-2008-3392 describes a cross-site request forgery vulnerability in Web Wiz Forum 9.5 that allows remote attackers to log out a user by visiting a crafted link or IMG tag to log_off_user.asp. The published data shows an attacker-authenticated–not required scenario (authentication: NONE) with im...
MyBB search.php文件跨站脚本执行漏洞
BUGTRAQ ID: 30401 CVECAN ID: CVE-2008-3334 MyBB是一款流行的Web论坛程序。 MyBB的search.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 MyBB 1.2.x MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.net/download/latest...
PunBB多个远程跨站脚本漏洞
BUGTRAQ ID: 30396 CVECAN ID: CVE-2008-3336 PunBB是一款基于PHP的论坛程序。 PunBB的include/parser.php和moderate.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 PunBB 1.x PunBB ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://punbb.informer.com/download/punbb-1.2.19.tar.gz...
Geeklog Forum Plugin vulnerable to cross-site scripting
Overview Geeklog Forum Plugin contains a cross-site scripting vulnerability. Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. NetAgent Co., Ltd. reported this vulnerability to IPA. JPCERT/C...
Web Wiz Forum 9.5 - 'admin_group_details.asp?mode' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30398/info Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...
Unfixed XSS vulnerability at www.xgn.com.au
Security researcher doublecheck, has submitted on 27/07/2008 a cross-site-scripting XSS vulnerability affecting www.xgn.com.au, which at the time of submission ranked 3589812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2009. It is...
IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit
No description provided by source. Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB = 1.0-RC9.2 Site: icebb.net Bug: Blind SQL Injection Exploit: Session Hijacking PoC Works regardless of php.ini settings Description: IceBB is a powerful, fast, free, and open-source forum solution...
The big data library default address-vulnerability warning-the black bar safety net
data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management system...
IceBB <= 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit
Exploit for unknown platform in category web applications ================================================================== IceBB = 1.0-RC9.2 Blind SQL Injection / Session Hijacking Exploit ================================================================== Author: GiReX 26/07/08 Homepage:...
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking
IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB ...
IceBB 1.0-RC9.2 - Blind SQL Injection / Session Hijacking
Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB \ input'author''" Setting author=\ in this query: "SELECT...
Cross site scripting
Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...
CVE-2008-3316
Cross-site scripting XSS vulnerability in the search feature in the Forum plugin before 2.7.1 for Geeklog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to 1 publichtml/index.php, 2 config.php, and 3 functions.inc...
CVE-2008-3316
CVE-2008-3316 concerns a cross-site scripting (XSS) vulnerability in the search feature of the Geeklog Forum Plugin (pre-2.7.1). The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors; likely related to files such as public_html/index.php, config.php, and functi...
JVN#60419863 Geeklog Forum Plugin vulnerable to cross-site scripting
Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Update the Software Apply the latest update provided by the...