phpBB viewtopic.php Arbitrary Code Execution

This module exploits two arbitrary PHP code execution flaws in the phpBB forum system. The problem is that the 'highlight' parameter in the 'viewtopic.php' script is not verified properly and will allow an attacker to inject arbitrary code via pregreplace. This vulnerability was introduced in...

Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities

Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/11654/info Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks. All version...

Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/11654/info Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks. All versions of Aztek Forum are considered vulnerable at the moment...

PBLang v4.x shell exploit

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: PBLang v4.x shell exploit Bug found by: тёмыч Date: 5.11.2004 Всё давольна проста: 1. Заходим на форум в отдел регистрации 2. Вводим и...

[Powie's PSCRIPT Forum] Multiple SQL-Injection Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple SQL-Injection Vulnerabilities in Powie's PSCRIPT Forum Summary Product Powie's PSCRIPT Forum Version = 1.26 OS affected All with PHP and mySQL Remote Exploit Yes Risk Lvl Medium High Vendor Thomas 'Powie' Erhardt http://www.pscript.de/ Inform...

FuseTalk Forum img src Tag XSS

The remote host is using FuseTalk, a web-based discussion forum. A vulnerability exists in the script 'tombstone.cfm' that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SA12844] AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection

TITLE: AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA12844 VERIFY ADVISORY: http://secunia.com/advisories/12844/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: AliveSites Forum 2.x...

[SA12843] WowBB Forum Unspecified SQL Injection and Cross-Site Scripting

TITLE: WowBB Forum Unspecified SQL Injection and Cross-Site Scripting SECUNIA ADVISORY ID: SA12843 VERIFY ADVISORY: http://secunia.com/advisories/12843/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: WowBB Forum 1.x...

XXS in fusetalk forum

Vendor : fusetalk URL : http://www.fusetalk.com/ Version: 4.0 Risk : Cross site scripting Description: Fusetalk is a discussion forum solution that provides a powerful and simple method of web-based collaboration. Cross site scripting: The filtering script for the img src= doesnt filter " if...

FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities

FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of...

FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data. The...

w-Agora Multiple Script Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could send specially crafted URL to read arbitrary files from the remote system with the privileges of the web server...

w-agora.txt

http://www.maxpatrol.com/mpadvisory.asp Title: Multiple vulnerabilities in w-agora forum Date: 28.09.04 Severity: Medium Application: w-agora 4.1.6a, http://www.w-agora/en/download.php Platform: PHP I. DESCRIPTION Multiple vulnerabilities were found in w-agora forum. A remote user can conduct SQL...

[Full-Disclosure] Multiple vulnerabilities in w-agora forum

http://www.maxpatrol.com/mpadvisory.asp Title: Multiple vulnerabilities in w-agora forum Date: 28.09.04 Severity: Medium Application: w-agora 4.1.6a, http://www.w-agora/en/download.php Platform: PHP I. DESCRIPTION Multiple vulnerabilities were found in w-agora forum. A remote user can conduct SQL...

MegaBBS ASP Forum SQL Injection

Binary data 2330.prm...

[Full-Disclosure] HTTP Response Splitting and SQL injection in megabbs forum

URL: http://www.pd9soft.com Tested megabbs 2.1 1. HTTP Response Splitting http://www.pd9soft.com/megabbs/forums/thread-post.asp?action=writenew&fid=0 d0aContent-Length:2000d0a0d0aHTTP/1.02020020OK0d0aContent-Type:20 text/html0d0aContent-Length:20330d0a0d0a3chtml3eScanned20by20Maxp...

Snitz Forum < 3.4.05 HTTP Response Splitting

Binary data 2302.prm...

YaBB 1.x9.1.2000 - YaBB.pl IMSend Cross-Site Scripting

YaBB 1.x9.1.2000 - YaBB.pl IMSend Cross-Site Scripting source: https://www.securityfocus.com/bid/11215/info A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script. As a result, it is possible for a remote attacker to create a malicious link to the affected page of a...

YaBB 1.x/9.1.2000 - Administrator Command Execution

source: https://www.securityfocus.com/bid/11214/info It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands. This issue permits a remote attacker to create a...

YaBB 1.x/9.1.2000 - 'YaBB.pl IMSend' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11215/info A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script. As a result, it is possible for a remote attacker to create a malicious link to the affected page of a site hosting the web forum. The malicious link may conta...