File input focus stealing vulnerability — Mozilla

A user on the Sla.ckers.org forums named hong reported that a file upload control could be filled programmatically by switching page focus to the label before a file upload form control for selected keyboard events. An attacker could use this trick to steal files from the users' computer if the...

CVE-2004-2733

The CVE-2004-2733 vulnerability concerns Web Wiz Forums 7.7a, where flawed privilege logic allows remote attackers to perform two actions: (1) block arbitrary IP addresses via pop_up_ip_blocking.asp and (2) modify topics via pop_up_topic_admin.asp. The NVD entry notes a network attack vector, no ...

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

CVE-2004-2733: Undefined Security Weakness

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

CVE-2004-2720

The vulnerability CVE-2004-2720 affects Snitz Forums 2000 (versions 3.4.04 and earlier) where a cross-site scripting (XSS) flaw exists in register.asp. The root cause is unvalidated input in the Email parameter, allowing an attacker to inject arbitrary web script or HTML via javascript events. Th...

CVE-2004-2720: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter...

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

Default credentials

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

Design/Logic Flaw

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5171

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

CVE-2007-5171

Technical details about CVE-2007-5171 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2007-5172

Quicksilver Forums prior to version 1.4.1 is affected by CVE-2007-5172. The issue allows remote attackers to obtain sensitive information by triggering unspecified connection errors, which disclose the database password within the resulting error message. This vulnerability impacts confidentialit...

CVE-2007-5171

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5171: Undefined Security Weakness

Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors...

CVE-2007-5172: Exposure of Sensitive Information to an Unauthorized Actor

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...

Husrev Forums v2.0.1:PoWerBoard Sql

//////////////////////////////////////////////////////// Yollubunlar.Org //////////////////////////////////////////////////////// Title:Husrev Forums v2.0.1:PoWerBoard Sql injection Exploit Author : Yollubunlar.Org Orginal:...

husrev-sql.txt

//////////////////////////////////////////////////////// Yollubunlar.Org //////////////////////////////////////////////////////// Title:Husrev Forums v2.0.1:PoWerBoard Sql injection Exploit Author : Yollubunlar.Org Orginal:...

msforums-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 XSS in http://forums.microsoft.com/ - could lead to cookie/account stealing, information disclosure and more... Start e.g. here: http://forums.microsoft.com/Genuine/default.aspx?SiteID=25 Enter one of the following examples in searchbox of forum, the...

DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy

I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...