CVE-2006-0779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...

CVE-2006-0778

Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...

CVE-2006-0778: Undefined Security Weakness

Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...

CVE-2006-0779

CVE-2006-0779 concerns a cross-site scripting (XSS) vulnerability in XMB Forums (u2u.php) affecting 1.9.3 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via the username parameter, demonstrated with a URL-encoded iframe tag. Affected component: u2u.php; vulnerabilit...

XMB Forums Multiple Vulnerabilities

GulfTech Security Research February 12, 2006 Vendor : XMB Software URL : http://www.xmbforum.com/ Version : XMB Forums = 1.9.3 Risk : Multiple Vulnerabilities Description: XMB Forums is a popular forum software written in php and mysql that allows you to open up your own online community or...

[SA18821] XMB Forums today.php Cookie Data SQL Injection

TITLE: XMB Forums today.php Cookie Data SQL Injection SECUNIA ADVISORY ID: SA18821 VERIFY ADVISORY: http://secunia.com/advisories/18821/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: XMB 1.x http://secunia.com/product/1491/ DESCRIPTION: James Bercegay has...

Invision Power Board Army System Mod 2.1 SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Invision Power Board Army System Mod 2.1 SQL Injection Exploit ============================================================== ?php / --------------------------- EXPLOIT...

Sql injection

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field...

CVE-2006-0490

The CVE-2006-0490 entry describes an SQL injection vulnerability in login.asp of ASPThai.Net ASPThai Forums 8.0 and earlier , enabling remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field. No exploit details or remediation are provided in the c...

CVE-2006-0490

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field...

CVE-2006-0490: Undefined Security Weakness

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field...

Snitz Forums 2000 post.asp type Parameter XSS

The remote host is running Snitz Forums 2000, a web-based electronic forum written in ASP. The version of Snitz Forums 2000 installed on the remote host fails to sanitize the 'type' parameter before using it in the 'post.asp' script to generate dynamic content. By leveraging this flaw, an attacke...

phpBB 2.0.19 - Cross-Site Scripting Remote Cookie Disclosure

to be used with cookie stealer located here: http://www.milw0rm.com/id.php?id=1103 https://www.exploit-db.com/exploits/1103/ Make sure you change www.milw0rm.com to your domain. thnx. /str0ke Author: threesixthousan / As long as html is ON in the latest version of phpBB forums, several XSS attack...

ASPThai Forums 8.0 - login.asp SQL Injection

ASPThai Forums 8.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/16404/info ASPThai Forums is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

ASPThai Forums 8.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/16404/info ASPThai Forums is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise...

Cross site scripting

Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2006-0175

Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2005-4646

Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode parameter, possibly due to a directory traversal vulnerability. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-0175

Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2005-4647

CVE-2005-4647 affects PEARLINGER Pearl Forums 2.4. the vulnerability is an SQL injection in index.php via the forumsId and topicId parameters. root cause: insufficient input sanitization allows remote attackers to craft SQL commands. Impact per available data: partial confidentiality, integrity, ...