[waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]

================================================================================ waraxe-2004-SA012 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium SP3 and 1.9 Nexus Beta...

XSS в разных форумах

Здравствуйте, 3APA3A. играясь с е107 обнаружил следующее: forum проверено на версии 6.12 возможность вставки BBCode URL=http://some.url"style="position:absolute;left:220px;top:10px;"size=14test /size/URL проверенный:...

XSS in e107 forum

Существует возможность вставки произвольного HTML код в тело сообщения. Удаленный атакующий может вставить специально отформатированный BB тэг bbcode , чтобы заставить форум отобразить произвольный код сценария в браузере пользователя, просматривающего злонамеренное сообщение. При желании, укорот...

[waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0]

================================================================================ waraxe-2004-SA008 ================================================================================ waraxe-2004-SA008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0...

[waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c]

================================================================================ waraxe-2004-SA009 ================================================================================ Non-critical Sql injection and XSS bug in PhpBB 2.0.6c...

CVE-2004-0338

SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter...

CVE-2004-0338

The CVE-2004-0338 affects Invision Board Forum's search.php; a SQL injection via the st parameter allows remote arbitrary queries. The connected sources (NVD, CVE records, CVEList) confirm the vulnerability but do not provide exploit code or active exploitation status in these documents. No remed...

CVE-2004-0248

CVE-2004-0248 describes a cross-site scripting (XSS) vulnerability in PHPX 3.2.3. The issue allows remote attackers to run arbitrary script as another user by injecting HTML or script into three inputs: the keywords argument of main.inc.php, the body argument of help.inc.php, or the subject field...

phpBBXSS206d.txt

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.6d && Earlier Risk : Cross Site Scripting Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

phpBB 2.0.6d && Earlier Security Issues

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.6d && Earlier Risk : Cross Site Scripting Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

waraxe-2004-SA004.txt

================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting

XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of...

XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting

XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...

XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections

XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remo...

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting

XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...

YABB information leakage on failed login

YABB is a popular web-based bulletin board system, written in perl and available from http://www.yabbforum.com/. While evaluating it, I found a minor issue where an attacker trying to log in to the forums can extract some useful information making his job easier than it needs to be. Most YABB...