CVE-2007-5676

CVE-2007-5676 relates to a PHP remote file inclusion in PHP-Nuke Platinum 7.6.b.5, specifically in modules/Forums/favorites.php. The underlying issue allows an attacker to execute arbitrary PHP code via a URL supplied to the nuke_bb_root_path parameter, enabling remote code execution. The affecte...

Mozilla Foundation Security Advisory 2007-32

Mozilla Foundation Security Advisory 2007-32 Title: File input focus stealing vulnerability Impact: Moderate Announced: October 18, 2007 Reporter: hong, Charles McAuley Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.8 SeaMonkey 1.1.5 Description A user on the Sla.ckers.org forums named hong...

File input focus stealing vulnerability — Mozilla

A user on the Sla.ckers.org forums named hong reported that a file upload control could be filled programmatically by switching page focus to the label before a file upload form control for selected keyboard events. An attacker could use this trick to steal files from the users' computer if the...

CVE-2004-2733

The CVE-2004-2733 vulnerability concerns Web Wiz Forums 7.7a, where flawed privilege logic allows remote attackers to perform two actions: (1) block arbitrary IP addresses via pop_up_ip_blocking.asp and (2) modify topics via pop_up_topic_admin.asp. The NVD entry notes a network attack vector, no ...

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

CVE-2004-2720

The vulnerability CVE-2004-2720 affects Snitz Forums 2000 (versions 3.4.04 and earlier) where a cross-site scripting (XSS) flaw exists in register.asp. The root cause is unvalidated input in the Email parameter, allowing an attacker to inject arbitrary web script or HTML via javascript events. Th...

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

Default credentials

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

Design/Logic Flaw

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5171

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5172

Quicksilver Forums prior to version 1.4.1 is affected by CVE-2007-5172. The issue allows remote attackers to obtain sensitive information by triggering unspecified connection errors, which disclose the database password within the resulting error message. This vulnerability impacts confidentialit...

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

CVE-2007-5171

Technical details about CVE-2007-5171 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5171

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

Husrev Forums v2.0.1:PoWerBoard Sql

//////////////////////////////////////////////////////// Yollubunlar.Org //////////////////////////////////////////////////////// Title:Husrev Forums v2.0.1:PoWerBoard Sql injection Exploit Author : Yollubunlar.Org Orginal:...

husrev-sql.txt

//////////////////////////////////////////////////////// Yollubunlar.Org //////////////////////////////////////////////////////// Title:Husrev Forums v2.0.1:PoWerBoard Sql injection Exploit Author : Yollubunlar.Org Orginal:...

msforums-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 XSS in http://forums.microsoft.com/ - could lead to cookie/account stealing, information disclosure and more... Start e.g. here: http://forums.microsoft.com/Genuine/default.aspx?SiteID=25 Enter one of the following examples in searchbox of forum, the...

DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy

I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...

CVE-2007-4095

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...

Sql injection

SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...