8126 matches found
CVE-2005-3394: Undefined Security Weakness
Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 channel parameter in the topics module and 2 topic parameter in the posting module...
XMB Forum 1.9.3 - 'post.php' SQL Injection
source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
XMB Forum 1.9.3 - post.php SQL Injection
XMB Forum 1.9.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
[SA17387] ASP Fast Forum "error" Cross-Site Scripting Vulnerability
TITLE: ASP Fast Forum "error" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17387 VERIFY ADVISORY: http://secunia.com/advisories/17387/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ASP Fast Forum http://secunia.com/product/6015/ DESCRIPTION:...
CVE-2005-3422: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Snitz Forum 2000 - post.asp Cross-Site Scripting
Snitz Forum 2000 - post.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to ha...
Snitz Forum 2000 - 'post.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/15241/info Snitz Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...
Snitz Forum < 3.4.0.06 XSS
Binary data 3271.prm...
CVE-2005-3361
Cross-site scripting XSS vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306...
CVE-2005-3361: Undefined Security Weakness
Cross-site scripting XSS vulnerability in forum/index.php in FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the nome parameter in a login operation, a variant of CVE-2005-3306...
ASP Fast Forum - error.asp Cross-Site Scripting
ASP Fast Forum - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/15233/info ASP Fast Forum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
CVE-2005-2338: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...
[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
---------------------------------------------------------------------- SNS Advisory No.85 XOOPS Multiple Cross-site Scripting Vulnerabilities Problem first discovered on: Sun, 25 Sep 2005 Published on: Tue, 25 Oct 2005 ---------------------------------------------------------------------- Severit...
Nuked klan 1.7: Bypassed level admin on forum(corrected)
mail/msn: [email protected] remplace THREADID id of the thread that you want to see remplace FORUMID id of the forum in which your thread is that allow you to view the post level admin http://target/index.php?file=Forum&page=viewtopic&forumid=FORUMID' OR id LIKE '' /&threadid=THREADID' AND...
Nuked klan 1.7: SQL vulnerability
mail/msn: [email protected] FORUM http://127.0.0.1/nk/index.php?file=Forum&page=viewtopic&forumid='SQL&threadid='SQL LINK http://127.0.0.1/nk/index.php?file=Links&op=description&linkid='SQL ARTICLES http://127.0.0.1/nk/index.php?file=Sections&op=article&artid='SQL TELECHARGEMENT...
CVE-2005-3282
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
CVE-2005-3282
CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...
CVE-2005-3282
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
CVE-2005-3282: Undefined Security Weakness
Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...
Nuked klan 1.7: XSS vulnerability
mail/msn: [email protected] ====================================== Sreach Module Mots clйs & Auteur : "XSS ====================================== ====================================== Guestbook Module exec in edit URL "XSS Commentair /textareaXSS ======================================...