8126 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1110
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1112
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
CVE-2006-1111
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
CVE-2006-1112
The CVE-2006-1112 issue affects Aztek Forum 4.0. A remote attacker can cause exposure of sensitive information by supplying a long login value in the register form, which triggers a MySQL error that reveals the installation path. Root cause: error message disclosure via user-controlled login inpu...
CVE-2006-1110
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
CVE-2006-1112
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
CVE-2006-1111
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
CVE-2006-1111
CVE-2006-1111 affects Aztek Forum 4.0. The vulnerability arises from a vulnerability in index.php where a "/ " value in the msg parameter can trigger a MySQL error message that reveals usernames and passwords. The root cause is described as possibly due to a forced SQL error or SQL injection. The...
CVE-2006-1110
CVE-2006-1110 affects Aztek Forum 4.0 with a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via the message body when creating a new message. The CVSS-derived impact indicates partial integrity loss and no confidentiality/availability impact, with ...
Regained it! Easily retrieve forgotten website Forum account password-loophole warning-the black bar safety net
Now,more and more software download and movies BT download website provide a“forum Forum”or the like members of the nature of the service. This forum prior to logging in General need to enter the user's personal account password to use. Just one or two forums okay, once more than the number of up...
ADP Forum 2.0,* script İnjection
http://biyosecurity.be/bugs/adpforum2.html ADP Forum 2.0, script njection ---------------------------------------------------- site:http://www.linux.it/fedro/ demo:http://www.adp.host.sk/Forum203/ -------------------------------------------------- Post This Code: scriptalert/Liz0ziM//script...
CVE-2006-1111: Undefined Security Weakness
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...
ADP Forum 2.0.x - Subject HTML Injection
ADP Forum 2.0.x - Subject HTML Injection source: https://www.securityfocus.com/bid/17047/info ADP Forum is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...
CVE-2006-1112: Undefined Security Weakness
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...
CVE-2006-1110: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message...
ADP Forum 2.0.x - 'Subject' HTML Injection
source: https://www.securityfocus.com/bid/17047/info ADP Forum is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the context of t...
EV0085.txt
New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...
EV0086.txt
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...