CVE-2002-2085: Undefined Security Weakness

Directory traversal vulnerability in page.cgi of WWWeBBB Forum 3.82 beta and earlier allows remote attackers to read arbitrary files via a .. dot dot in an HTTP request...

CVE-2002-2056: Undefined Security Weakness

Cross-site scripting XSS vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the validusernameonline cookie...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...

CVE-2005-2228: Undefined Security Weakness

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...

CVE-2004-2180

WowBB Forum 1.61 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities. The flaws allow attackers to inject arbitrary script/HTML via numerous vectors: country (view_user.php), show (view_forum.php), letter (view_user.php), highlight (view_topic.php), show (inde...

CVE-2004-2181

CVE-2004-2181 affects WowBB Forum 1.61 (and related vectors reported in 1.65). It is due to multiple SQL injection flaws allowing remote attackers to manipulate SQL queries via view_user.php parameters (sort_by, page) or via the forum_id parameter to view_topic.php. The CVSS base score is 7.5 (HI...

CVE-2004-2177

Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2004-2178

SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2180

Multiple cross-site scripting XSS vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the 1 country parameter to viewuser.php, 2 show parameter to viewforum.php, 3 letter parameter to viewuser.php, 4 highlight parameter to viewtopic.php, 5 show...

CVE-2004-2181

Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 page parameters to viewuser.php, or the 3 forumid parameter to viewtopic.php. NOTE: the sortby vector was later reported to be present in WowBB 1.65...

CVE-2004-2178

CVE-2004-2178 : SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The affected software is a PHP-based web forum. The impact is described as arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH) . No spec...

CVE-2004-2177

CVE-2004-2177 affects DevoyBB Web Forum 1.0.0. Multiple sources (NVD, Red Hat, CVE list, OpenVAS NT/NESSUS) describe a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. OpenVAS notes additional vulnerability vectors (...

CVE-2004-2178: Undefined Security Weakness

SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2181: Undefined Security Weakness

Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 page parameters to viewuser.php, or the 3 forumid parameter to viewtopic.php. NOTE: the sortby vector was later reported to be present in WowBB 1.65...

CVE-2004-2177: Undefined Security Weakness

Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2004-2180: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the 1 country parameter to viewuser.php, 2 show parameter to viewforum.php, 3 letter parameter to viewuser.php, 4 highlight parameter to viewtopic.php, 5 show...

CVE-2005-2084

Cross-site scripting XSS vulnerability in SearchResults.aspx in Community Forum allows remote attackers to inject arbitrary web script or HTML via the q parameter...

ovidentiaXSS.txt

Ovidentia is a project which allows you to publish with extreme ease and very fast an intranet, extranet or internet portal with the classic functions of a Content Management System CMS. Its website is at http://www.ovidentia.org Ovidentia suffers from a vulnerability which allows you to embed XS...

CVE-2005-2084

CVE-2005-2084 describes a cross-site scripting (XSS) vulnerability in SearchResults.aspx within a Community Forum, where an attacker can inject arbitrary web script or HTML through the q parameter. The affected software/component is the Community Forum’s SearchResults.aspx page; the vulnerability...