7159 matches found
EV0085.txt
New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...
Sql injection
SQL injection vulnerability in forumlib.php in JohnnyVegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2006-1020
SQL injection vulnerability in forumlib.php in JohnnyVegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2006-1020
CVE-2006-1020 affects Vegas Forum 1.0 (Vegas Forum) via forumlib.php: the postid parameter is not properly sanitized, enabling remote SQL injection to execute arbitrary queries. Affected file/script: forumlib.php. Evidence from multiple sources (eVuln EV0090, NVD entry) confirms remote exploitati...
CVE-2006-1020
SQL injection vulnerability in forumlib.php in JohnnyVegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
[eVuln] Easy Forum XSS Vulnerability
New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...
VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting
VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
VBZooM Forum 1.11 - 'contact.php?UserID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...
VBZoom Forum 1.11 - 'show.php' MainID SQL Injection
source: https://www.securityfocus.com/bid/16955/info VBZooM Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise t...
VBZoom Forum 1.11 - show.php MainID SQL Injection
VBZoom Forum 1.11 - show.php MainID SQL Injection source: https://www.securityfocus.com/bid/16955/info VBZooM Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting
VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Easy Forum 2.5 - New User Image File HTML Injection
source: https://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...
Cross site scripting
Cross-site scripting XSS vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the errtxt parameter...
[SA19096] Aztek Forum Message Body Script Insertion Vulnerability
TITLE: Aztek Forum Message Body Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19096 VERIFY ADVISORY: http://secunia.com/advisories/19096/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aztek Forum http://secunia.com/product/4254/ DESCRIPTION: loren...
CVE-2006-0896
Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...
CVE-2006-0896
The CVE-2006-0896 issue affects Simple Machines Forum (SMF) 1.0.6, specifically the Sources/Register.php script. The root cause is improper sanitization of the HTTP_X_FORWARDED_FOR header, enabling a remote attacker to inject arbitrary HTML or script via XSS. Documents indicate an exploit exists ...
CVE-2006-0896
Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...