CVE-2005-4549

Cross-site scripting XSS vulnerability in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to inject arbitrary web script or HTML via the 1 RowKeyValue parameter in the PORTAL schema; and the 2 title and 3 content input fields when creating an forum article...

CVE-2005-4550

The PORTAL schema in Oracle Application Server OracleAS Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a dfnextpage parameter with a trailing null byte %00...

CVE-2005-4550

CVE-2005-4550 affects the PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet. The vulnerability allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter that can contain a trailing null byte (%00). This is caused ...

VEGO Web Forum 1.x - Theme_ID SQL Injection

VEGO Web Forum 1.x - ThemeID SQL Injection source: https://www.securityfocus.com/bid/16107/info VEGO Web Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

phpBB 2.0.17 - signature_bbcode_uid Remot Command

phpBB 2.0.17 - signaturebbcodeuid Remot Command !/usr/bin/perl phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username' = $name, 'email' = $rand.'[email protected]',...

phpBB 2.0.17 - 'signature_bbcode_uid' Remot Command

!/usr/bin/perl phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username' = $name, 'email' = $rand.'[email protected]', 'newpassword' = $password, 'passwordconfirm' =...

phpBB Forum program:the old revolution met the new problem-the vulnerability warning-the black bar safety net

phpBB 2.0.18 XSS and Full Path Disclosure Details: SecurityAlert There is a brute force tool, a single thread, there is no useful,it rivals had a what phpbb what also can be used to run the password 下载 :http://ftpzhangxue.w205.100dns.com/tools/phpbb.rar Topic : phpBB 2.0.18 XSS and Full Path...

[Full-disclosure] SEC Consult SA-20051223-0 :: Multiple Cross Site Scripting Vulnerabilities in OracleAS Discussion Forum Portlet

SEC Consult Security Advisory 20051223-0 ======================================================================== title: Multiple Cross Site Scripting Vulnerabilities in OracleAS Discussion Forum Portlet program: OracleAS Discussion Forum Portlet vulnerable version: Version of May 2005 homepage:...

[Full-disclosure] SEC Consult SA-20051223-1 :: File Disclosure using df_next_page parameter in OracleAS Discussion Forum Portlet

SEC Consult Security Advisory 20051223-1 ======================================================================== title: File Disclosure using dfnextpage parameter in OracleAS Discussion Forum Portlet program: OracleAS Discussion Forum Portlet vulnerable version: Version of May 2005 homepage:...

All the forums are there BUG-vulnerability warning-the black bar safety net

I found an almost all forums have issues, the problem says big say small is not small,is now all Forum is not almost all support directly the FLASH file directly after the display of the Visual? Just do a FLASH VIRUS is not on the forum cause a great impact? Or do Go directly to HTML the BACKDOOR...

[KAPDA::#17] - beehiveforum Script Injection

KAPDA New advisory Vendor: http://www.beehiveforum.net Vulnerable: Version 0.6.2 Bug: HTML Injection , Possible attacks with registerglobals = On Exploitation: Remote with browser Description: -------------------- Beehive Forum is a PHP-based message board system that uses a MySQL database...

Beehive Forum 0.6.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16521/info Beehive Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain administrative...

Beehive Forum 0.6.2 - index.php SQL Injection

Beehive Forum 0.6.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/16521/info Beehive Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to...

CVE-2005-4460

Cross-site scripting XSS vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Description, and 3 Comment fields to a links.php and b linksadd.php...

CVE-2005-4461

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the usersess parameter...

CVE-2005-4461

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the usersess parameter...

CVE-2005-4460

Beehive Forum before or at version 0.6.2 is affected by a cross-site scripting (XSS) vulnerability in links.php and links_add.php. The issue allows remote attackers to inject arbitrary web script or HTML via the Name, Description, and Comment fields. The CVE-2005-4460 description in the provided ...

CVE-2005-4460

Cross-site scripting XSS vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Description, and 3 Comment fields to a links.php and b linksadd.php...

CVE-2005-4461

The CVE-2005-4461 entry concerns Beehive Forum (version 0.6.2 and earlier) with a SQL injection in index.php triggered by the user_sess parameter. The underlying issue allows an attacker to remotely execute arbitrary SQL commands, affecting the database via the vulnerable script. The available re...

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/16002/info Beehive Forum is prone to multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...