1501 matches found
[Full-disclosure] Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp)
--Security Report-- Advisory:XSS vulnerability on WebWiz Forums = 6.34 searchform.asp --- Date: 08/01/06 07:19 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- About: Via this method the WebWiz Forums = 6.34 are being subjected to an attack namely XSS attack...
WebWiz Forums - 'Search_form.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...
webwiz634.txt
--Security Report-- Advisory:XSS vulnerability on WebWiz Forums = 7.01 Regards, From the NWPX team, nuker a.k.a nukedx...
CVE-2005-4646
Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode parameter, possibly due to a directory traversal vulnerability. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...
CVE-2005-4647
Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the 1 forumsId and 2 topicId parameters in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...
CVE-2005-4485
Multiple cross-site scripting XSS vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp, 2 searchemployees.asp, 3 cat.asp, and 4 links.asp; 5 projectid parameter to pmprojects.asp, 6 retpage parameter...
CVE-2005-4030
SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTPUSERAGENT header...
CVE-2005-4030
CVE-2005-4030 affects Quicksilver Forums prior to version 1.5.1. The vulnerability is a SQL injection in the HTTP_USER_AGENT header that allows remote attackers to modify or retrieve data by injecting arbitrary SQL commands. The description and related records confirm a remote, unauthenticated im...
CVE-2005-4030
SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTPUSERAGENT header...
CVE-2003-1244
CVE-2003-1244 affects phpBB 2.0, 2.0.1 and 2.0.2 via a SQL injection in page_header.php triggered by the forum_id parameter to index.php. The underlying issue is improper handling of the forum_id value, enabling an attacker to brute-force user passwords and potentially gain unauthorized access to...
Pearl Forums 2.0 - index.php Local File Inclusion
Pearl Forums 2.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/15433/info Pearl Forums is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
Pearl Forums 2.0 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/15433/info Pearl Forums is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to disclose sensitive information. This may help with...
Pearl Forums 2.0 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15425/info Pearl Forums is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise...
xmbforums.txt
Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...
Xss - Html injection in XMB
Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...
Snitz Forums 2000 SQL injection
The remote host is using Snitz Forum 2000 This version allow an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out maliciou...
Snitz Forums 2000 SQL injection
The remote host is using Snitz Forum 2000 which allows an attacker to execute stored procedures and non-interactive operating system commands on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Snitz Forums 2000 HTTP Response Splitting
The remote host is using Snitz Forums 2000 - an ASP based forum/bbs. There is a bug in this software which makes it vulnerable to HTTP response splitting vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright...
[SA17385] Snitz Forums 2000 "post.asp" Cross-Site Scripting Vulnerability
TITLE: Snitz Forums 2000 "post.asp" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17385 VERIFY ADVISORY: http://secunia.com/advisories/17385/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Snitz Forums 2000 3.4.x http://secunia.com/product/1483/...