1501 matches found
CVE-2005-3411
CVE-2005-3411 concerns a cross-site scripting (XSS) vulnerability in Snitz Forums 2000, specifically in the post.asp script used to render Topic content. The vulnerability arises from unsanitized handling of the Type parameter when generating dynamic content, enabling an attacker to inject arbitr...
CVE-2005-3411
Cross-site scripting XSS vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method...
[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability
------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...
Splatt Forums < 4.0 Unspecified Authentication Bypass
Binary data 3264.prm...
efriends.txt
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
AlstraSoft E-Friends Remote Command Exucetion
AlstraSoft E-Friends Remote command exucetion Site : http://www.alstrasoft.com/efriends.htm Description : AlstraSoft E-Friends is an online social networking software that allows you to start your own site just like Friendster and Tribe.net. The E-Friends software allows members to connect to...
CVE-2005-2805
forumpost.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number...
CVE-2005-2805
The CVE-2005-2805 entry concerns e107 0.6, where forum_post.php is vulnerable. The issue allows remote attackers to post to non-existent forums by modifying the forum number, indicating a parameter manipulation flaw in the forum posting function. The core impact described is that unauthorized par...
CVE-2005-2805
forumpost.php in e107 0.6 allows remote attackers to post to non-existent forums by modifying the forum number...
vBulletin <= 3.0.8 Accessible Database Backup Searcher (update 3)
No description provided by source. / Needed to pentest a few vBulletin forums so I wrote this junk real quick. Reference: http://securitytracker.com/alerts/2005/Aug/1014805.html Good paths: /forum/ / /forum/archive/ /forum/cpadmin/ Update 1: Code error fixes. /str0ke [email protected] Update 2:...
vBulletin 3.0.8 - Accessible Database Backup Searcher (3)
vBulletin 3.0.8 - Accessible Database Backup Searcher 3 / Needed to pentest a few vBulletin forums so I wrote this junk real quick. Reference: http://securitytracker.com/alerts/2005/Aug/1014805.html Good paths: /forum/ / /forum/archive/ /forum/cpadmin/ Update 1: Code error fixes. /str0ke...
lduSQL.txt
TITLE: ====== Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities SEVERITY: ========= Medium SOFTWARE: ========= Land Down Under version 801 and prior Support Website : http://www.neocrome.net INFO: ===== Land Down Under is a multiple portal system which includes many different...
WebWizXSS.txt
Bug : XSS in Web Wiz Forums cookie stealing Bug founded by : [email protected] Comment : I found this bug in +- 1 hour after some bitch asked me to help him, but he haven't do shit LOL Greets to : HaCkZaTaN, Johnnie Walker, Morinex, j0ker, Woopie, siLgi, bcuzZ. Big Fuck to : cobradrive, 0x1fe er...
PT-2005-3561 · Land Down Under · Land Down Under (Ldu) 800
Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple SQL injection issues allow remote attackers to execute arbitrary SQL commands via various parameters to different PHP files, including s or m parameter to "forums.php", o, w, s, or p parameter to...
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability SEVERITY: ========= High SOFTWARE: ========= w-agora 4.2.0 http://w-agora.net INFO: ===== w-agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other...
phpfreenews140.txt
PHPFreeNews V1.40 and prior Multiple Vulnerabilities SEVERITY: ========= High SOFTWARE: ========= PHPFreeNews http://www.phpfreenews.co.uk/ INFO: ===== PHPFreeNews is a free PHP Script which allows you to display news headlines and articles on your website. DESCRIPTION: ============ PHPFreeNews...
postnuke0750.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...
XSS in forums CFBB v1.1.0
This BUGS discovered by rUnViRuS Http://www.security-arab.com [email protected] =-=-=-=-=-=-=-=-= XSS in forums CFBB v1.1.0 Powered by © AderSoftware 2002 =-=-=-=-=-=-=-=-= exploit http://www.example.com/forums/index.cfm?page=XSS =-=-=-=-=-=...
XSS in forums Simple Message Board Version 2.0 Beta 1
This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=scriptJavaScript:alertdocument.cookie;/script...