7159 matches found
CVE-2002-2054
TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the validlevel cookie to admin...
CVE-2002-2054
CVE-2002-2054 affects TeeKai Forum 1.2. Remote attackers can authenticate as the administrator and gain privileged web forum access by setting the valid_level cookie to admin. Exploitation details are not expanded in the provided documents beyond cookie manipulation; no remediation steps are spec...
CVE-2002-2056
CVE-2002-2056 describes a cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2, exploitable via the valid_username_online cookie to inject arbitrary script/HTML. The NVD entry assigns a MEDIUM base CVSS v2 score (AV:N/AC:M/Au:N/C:N/I:P/A:N). No exploit details or specific remediation are ...
CVE-2002-2056
Cross-site scripting XSS vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the validusernameonline cookie...
CVE-2002-2057
CVE-2002-2057 affects TeeKai Forum 1.2. The vulnerability is described as weak encryption of web usage statistics stored in data/member_log.txt under the web document root with insufficient access control, allowing remote attackers to identify IPs visiting the site by dividing each octet by the M...
CVE-2002-2085
CVE-2002-2085 - WWWeBBB Forum : Affected product: WWWeBBB Forum prior to or including version 3.82 beta. Vulnerable component: page.cgi. Issue: directory traversal via a .. in an HTTP request allows reading arbitrary files. Exploitability: network attack; evidence shows impact as partial confiden...
CVE-2002-2057
TeeKai Forum 1.2 uses weak encryption of web usage statistics in data/memberlog.txt, which is stored under the web document root with insufficient access control, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
CVE-2005-2228
Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...
CVE-2005-2228
Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...
CVE-2004-2178
SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2004-2178
CVE-2004-2178 : SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The affected software is a PHP-based web forum. The impact is described as arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH) . No spec...
CVE-2004-2180
Multiple cross-site scripting XSS vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the 1 country parameter to viewuser.php, 2 show parameter to viewforum.php, 3 letter parameter to viewuser.php, 4 highlight parameter to viewtopic.php, 5 show...
CVE-2004-2181
Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 page parameters to viewuser.php, or the 3 forumid parameter to viewtopic.php. NOTE: the sortby vector was later reported to be present in WowBB 1.65...
CVE-2004-2177
Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2004-2177
CVE-2004-2177 affects DevoyBB Web Forum 1.0.0. Multiple sources (NVD, Red Hat, CVE list, OpenVAS NT/NESSUS) describe a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. OpenVAS notes additional vulnerability vectors (...
CVE-2004-2181
CVE-2004-2181 affects WowBB Forum 1.61 (and related vectors reported in 1.65). It is due to multiple SQL injection flaws allowing remote attackers to manipulate SQL queries via view_user.php parameters (sort_by, page) or via the forum_id parameter to view_topic.php. The CVSS base score is 7.5 (HI...
CVE-2004-2180
WowBB Forum 1.61 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities. The flaws allow attackers to inject arbitrary script/HTML via numerous vectors: country (view_user.php), show (view_forum.php), letter (view_user.php), highlight (view_topic.php), show (inde...
CVE-2005-2084
Cross-site scripting XSS vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter...
ovidentiaXSS.txt
Ovidentia is a project which allows you to publish with extreme ease and very fast an intranet, extranet or internet portal with the classic functions of a Content Management System CMS. Its website is at http://www.ovidentia.org Ovidentia suffers from a vulnerability which allows you to embed XS...