8126 matches found
EZsite Forum Discloses Passwords to Remote Users - Active Check
The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
My Little Forum XSS Vulnerability
The remote host is running SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only From: David S. Ferreira [email protected] Subject: My Little...
FuseTalk forum XSS
The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2005-3436
Cross-site scripting XSS vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the 1 Search module, 2 certain edit fields in Guestbook, 3 the title in the Forum module, and 4 Textbox...
CVE-2005-3436
CVE-2005-3436 affects Nuked-Klan 1.7 with a cross-site scripting (XSS) vulnerability. The issue permits injection of arbitrary web script or HTML via multiple inputs: (1) the Search module, (2) specific fields in Guestbook, (3) the Forum module title, and (4) Textbox. The root cause is unsanitize...
XMB Forum < 1.9.8 SP2 SQL Injection
Binary data 3276.prm...
HYSA-2005-009.txt
------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...
VuBB Forum RC1 - m SQL Injection
VuBB Forum RC1 - m SQL Injection !/bin/env perl ------------------------------------------------------------ - VuBB RC1 SQL Injection .. By Devil-00 - ! ==|| This Exploit Only When magicquotesgpc Is OFF ||== - Gr33tz :- - Abducter .. - Devil-00 .. SQL Injection F0und3r & Expl0ting - |...
VUBB XSS & path disclosure Vulnerabilities
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...
VuBB Forum RC1 (m) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================== VuBB Forum RC1 m Remote SQL Injection Exploit =============================================== !/bin/env perl ------------------------------------------------------------ - VuBB RC1 SQL...
CVE-2005-3436: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the 1 Search module, 2 certain edit fields in Guestbook, 3 the title in the Forum module, and 4 Textbox...
CVE-2005-3422
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-3422
The CVE-2005-3422 entry describes a Cross-site Scripting (XSS) vulnerability in ASP Fast Forum’s error.asp, exploitable by remote attackers via the error parameter to inject arbitrary scripts/HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium), with attack vector Network, authenticatio...
CVE-2005-3422
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-3412
Cross-site scripting XSS vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an tag...
CVE-2005-3412
CVE-2005-3412 describes an XSS vulnerability in Elite Forum 1.0.0.0 that allows remote attackers to inject arbitrary script by posting a reply containing a javascript: URL inside an tag. The provided description identifies the vulnerable vector and affected product. No further exploitation detai...
CVE-2005-3405
ATutor
CVE-2005-3394
/* CVE-2005-3394 */ Summary: Multiple SQL injection vulnerabilities affect the oaboard forum 1.0 in the file/forum logic (forum.php). The two vulnerable parameters are the (1) channel parameter in the topics module and (2) the topic parameter in the posting module. What is affected: oaboard forum...
CVE-2005-3394
Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 channel parameter in the topics module and 2 topic parameter in the posting module...
CVE-2005-3412: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an tag...