7159 matches found
XMB Forum < 1.9.8 SP2 SQL Injection
Binary data 3276.prm...
VUBB XSS & path disclosure Vulnerabilities
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...
CVE-2005-3422
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-3422
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-3422
The CVE-2005-3422 entry describes a Cross-site Scripting (XSS) vulnerability in ASP Fast Forum’s error.asp, exploitable by remote attackers via the error parameter to inject arbitrary scripts/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium), with attack vector Network, authenticatio...
CVE-2005-3412
Cross-site scripting XSS vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an tag...
CVE-2005-3412
CVE-2005-3412 describes an XSS vulnerability in Elite Forum 1.0.0.0 that allows remote attackers to inject arbitrary script by posting a reply containing a javascript: URL inside an tag. The provided description identifies the vulnerable vector and affected product. No further exploitation detai...
CVE-2005-3394
Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 channel parameter in the topics module and 2 topic parameter in the posting module...
CVE-2005-3394
/* CVE-2005-3394 */ Summary: Multiple SQL injection vulnerabilities affect the oaboard forum 1.0 in the file/forum logic (forum.php). The two vulnerable parameters are the (1) channel parameter in the topics module and (2) the topic parameter in the posting module. What is affected: oaboard forum...
CVE-2005-3405
ATutor
[SA17387] ASP Fast Forum "error" Cross-Site Scripting Vulnerability
TITLE: ASP Fast Forum "error" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17387 VERIFY ADVISORY: http://secunia.com/advisories/17387/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ASP Fast Forum http://secunia.com/product/6015/ DESCRIPTION:...
XMB Forum 1.9.3 - post.php SQL Injection
XMB Forum 1.9.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
XMB Forum 1.9.3 - 'post.php' SQL Injection
source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
Snitz Forum < 3.4.0.06 XSS
Binary data 3271.prm...
Snitz Forum 2000 - post.asp Cross-Site Scripting
Snitz Forum 2000 - post.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...
Snitz Forum 2000 - 'post.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...
CVE-2005-3361
Cross-site scripting XSS vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306...
ASP Fast Forum - error.asp Cross-Site Scripting
ASP Fast Forum - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
---------------------------------------------------------------------- SNS Advisory No.85 XOOPS Multiple Cross-site Scripting Vulnerabilities Problem first discovered on: Sun, 25 Sep 2005 Published on: Tue, 25 Oct 2005 ---------------------------------------------------------------------- Severit...
Nuked klan 1.7: Bypassed level admin on forum(corrected)
mail/msn: [email protected] remplace THREADID id of the thread that you want to see remplace FORUMID id of the forum in which your thread is that allow you to view the post level admin http://target/index.php?file=Forum&page=viewtopic&forumid=FORUMID' OR id LIKE '' /&threadid=THREADID' AND...