Cross site scripting

Cross-site scripting XSS vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field possibly messaggio parameter when posting a new message in post.php...

CVE-2006-1157

Cross-site scripting XSS vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field possibly messaggio parameter when posting a new message in post.php...

CVE-2006-1157

CVE-2006-1157: XSS vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier. An attacker can inject arbitrary web script/HTML via the Subject field (possibly the messaggio parameter) when posting a new message in post.php. Reported with CVSSv2 metrics: AV:N/AC:M/Au:N/C:N/I:P/A:N; base score 4.3 (M...

CVE-2005-4729

CVE-2005-4729 describes an SQL injection in VBZooM Forum, in show.php via the SubjectID parameter. This allows remote execution of arbitrary SQL commands against the application. Connected records also reference the same subject (e.g., CVE-2006-1132 notes the MainID vector and confirms SubjectID ...

[SA19191] Hosting Controller "search" Forum SQL Injection

TITLE: Hosting Controller "search" Forum SQL Injection SECUNIA ADVISORY ID: SA19191 VERIFY ADVISORY: http://secunia.com/advisories/19191/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Hosting Controller 6.x http://secunia.com/product/4754/ DESCRIPTION:...

CVE-2006-1112

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...

Design/Logic Flaw

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...

Sql injection

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...

Cross site scripting

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-1110

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-1111

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...

CVE-2006-1112

The CVE-2006-1112 issue affects Aztek Forum 4.0. A remote attacker can cause exposure of sensitive information by supplying a long login value in the register form, which triggers a MySQL error that reveals the installation path. Root cause: error message disclosure via user-controlled login inpu...

CVE-2006-1112

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...

CVE-2006-1110

Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...

CVE-2006-1110

CVE-2006-1110 affects Aztek Forum 4.0 with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via the message body when creating a new message. The CVSS-derived impact indicates partial integrity loss and no confidentiality/availability impact, with ...

CVE-2006-1111

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...

CVE-2006-1111

CVE-2006-1111 affects Aztek Forum 4.0. The vulnerability arises from a vulnerability in index.php where a "/ " value in the msg parameter can trigger a MySQL error message that reveals usernames and passwords. The root cause is described as possibly due to a forced SQL error or SQL injection. The...

ADP Forum 2.0.x - Subject HTML Injection

ADP Forum 2.0.x - Subject HTML Injection source: https://www.securityfocus.com/bid/17047/info ADP Forum is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

Regained it! Easily retrieve forgotten website Forum account password-loophole warning-the black bar safety net

Now,more and more software download and movies BT download website provide a“forum Forum”or the like members of the nature of the service. This forum prior to logging in General need to enter the user's personal account password to use. Just one or two forums okay, once more than the number of up...

ADP Forum 2.0,* script İnjection

http://biyosecurity.be/bugs/adpforum2.html ADP Forum 2.0, script njection ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.adp.host.sk/Forum203/ -------------------------------------------------- Post This Code: scriptalert/Liz0ziM//script...