1501 matches found
CVE-2005-2228
Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...
CVE-2005-2228
Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...
CVE-2004-2211
CVE-2004-2211 describes a cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0. The flaw allows remote attackers to inject arbitrary scripts/HTML through multiple input vectors: forum_id, method, and forum_title in post.asp; forum_title in forum.asp; and id in post.asp. The cited ref...
CVE-2004-2211
Cross-site scripting XSS vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 forumid, 2 method, or 3 forumtitle parameters to post.asp, 4 the forumtitle parameter to forum.asp, or 5 the id parameter to post.asp...
CVE-2004-2212
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2004-2212
The CVE-2004-2212 entry concerns a SQL injection in AliveSites Forums 2.0. Affected software/component: AliveSites Forums 2.0 (forum.asp). The vulnerability is exposed via the forum_id parameter, allowing remote attackers to execute arbitrary SQL commands. The provided documents confirm the root ...
Community Server Forums - SearchResults.aspx Cross-Site Scripting
Community Server Forums - SearchResults.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/14078/info Community Server Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker...
Community Server Forums - 'SearchResults.aspx' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14078/info Community Server Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit these issues to execute arbitrary script code in the...
phpBB 2.0.15 - Register Multiple Users (Denial of Service) (Perl)
phpBB 2.0.15 - Register Multiple Users Denial of Service Perl !/usr/bin/perl Name: NsT-phpBBDoS Perl Version Copyright: Neo Security Team Author: HaCkZaTaN Ported: g30rg3x Date: 20/06/05 Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3x A Simple phpBB Registration And Search DoS...
Simple Machines Forum (SMF) 1.0.4 - modify SQL Injection
Simple Machines Forum SMF 1.0.4 - modify SQL Injection !/usr/bin/perl -w SMF Modify SQL Injection // All Versions // By James http://www.gulftech.org Simple proof of concept for the modify post SQL Injection issue I discovered in Simple Machine Forums. Supply this script with your username passwo...
CVE-2005-1890
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors...
CVE-2005-1890
Mortiforo before 0.9.1 has an unknown vulnerability that reportedly lets users access private forums. The exact vulnerable component, root cause, and attack vectors are not disclosed in the provided connected documents. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network impact,...
CVE-2005-1890
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors...
CVE-2003-1176
Technical details about CVE-2003-1176 are not provided in the supplied connected documents. Public availability of affected versions, root cause, and fixes is not confirmed here. Monitor for updates.
CVE-2003-1176
postmessageform.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID forum ID parameter...
CVE-2004-1966
Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter in board.php, 2 sortorder, perpage, or id parameters in member.php, 3 forums parameter in search.php, or 4 PID or FID parameters ...
CVE-2005-0345
viewthread.php in php-fusion 4.x does not check the 1 forumid or 2 forumcat parameters, which allows remote attackers to view protected forums via the threadid parameter...
phpBB < 2.0.15 admin_forums.php XSS
Binary data 2849.prm...
phpBB Upload Script "up.php" Arbitrary File Upload
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...
CPG Dragonfly Multiple XSS
The version of CPG Dragonfly / CPG-Nuke CMS installed on the remote host suffers from multiple cross-site scripting vulnerabilities due to its failure to sanitize user-input to several variables in various modules. An attacker can exploit these flaws to steal cookie-based authentication credentia...