1627 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 author, 2 subject, 3 message, or 4 dayprune parameter...
CVE-2006-1414
Toast Forums 1.6 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities in toast.asp. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) author, (2) subject, (3) message, or (4) dayprune. The vulnerability is confirmed in the C...
CVE-2006-1414: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 author, 2 subject, 3 message, or 4 dayprune parameter...
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities
Toast Forums 1.6 - Toast.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17249/info Toast Forums is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...
XSS in <= Toast Forums 1.6
XSS in = Toast Forums 1.6 Vuln. discovered by : r0t Date: 25 march 2005 vendor:http://www.toastforums.com/ affected versions: 1.6 and prior orginal advisory: http://pridels.blogspot.com/2006/03/xss-in-toast-forums-16.html Vuln. Description. Toast Forums contains a flaw that allows a remote cross...
Sql injection
SQL injection vulnerability in search.php in MyBulletinBoard MyBB 1.04 allows remote attackers to execute arbitrary SQL commands via the forums parameter...
phpBannerExchange 2.0 Directory Traversal Vulnerability
------------------------------------------------------ HYSA-2006-004 h4cky0u.org Advisory 013 ------------------------------------------------------ Date - Tue Mar 07 2006 TITLE: ====== phpBannerExchange 2.0 Directory Traversal Vulnerability SEVERITY: ========= High SOFTWARE: =========...
CVE-2006-1065: Undefined Security Weakness
SQL injection vulnerability in search.php in MyBulletinBoard MyBB 1.04 allows remote attackers to execute arbitrary SQL commands via the forums parameter...
aztek40.txt
/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line: '"alertdocument.cookie -...
AZTEK forums 4.0 multiple vulnerabilities (PoC)
/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line:...
Aztek Forum 4.00 (XSS/SQL) Multiple Vulnerabilities (PoC)
Exploit for unknown platform in category web applications ========================================================= Aztek Forum 4.00 XSS/SQL Multiple Vulnerabilities PoC ========================================================= /==========================================/ // AZTEK forums 4.0...
Aztek Forum 4.00 (XSS/SQL) Multiple Vulnerabilities (PoC)
No description provided by source. /==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the...
Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
/==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message including the following line:...
Aztek Forum 4.00 - Cross-Site Scripting SQL Injection
Aztek Forum 4.00 - Cross-Site Scripting SQL Injection /==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message...
ArchAngelFlaw.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KingOfSka - http://www.cpc.info.ms Contro Potere Crew Advisories 5 26/02/2006 http://www.archangelmgt.com/ Archangel Weblog 0.90.02 Admin Authentication Bypass & Remote File Inclusion 1:. Background : Archangel Weblog is a new, full featured weblog...
Cross site scripting
Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...
Sql injection
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...
CVE-2006-0778
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...
CVE-2006-0779
Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...
CVE-2006-0778
CVE-2006-0778 concerns multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via (1) the $u2u_select array parameter to u2u.inc.php and (2) the $val variable (fidpw0 cookie value) in today.php. Affected product:...