CVE-2012-6556

CVE-2012-6556 describes multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums. The issue enables remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter on the edit user page. The NVD ent...

CVE-2012-6557

Multiple XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary script/HTML via any of 15 AboutMe fields on the Edit My Details page (RealName, Name, Quote, Loc, Emp, JobTit, HS, Col, Bio, Inter, Mus, Gam, Mov, FTV, Bks). Affected software: V...

PT-2013-2009

Name of the Vulnerable Software and Affected Versions Vanilla Forums LatestComment plugin version 1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the discussion title. This could potentially lead to unauthorized actions on the...

PT-2013-2010

Name of the Vulnerable Software and Affected Versions FirstLastNames plugin version 1.1.1 for Vanilla Forums Description The issue allows remote attackers to inject arbitrary web script or HTML via the User/FirstName or User/LastName parameter to the edit user page, potentially leading to...

PT-2013-2011

Name of the Vulnerable Software and Affected Versions AboutMe plugin version 1.1.1 for Vanilla Forums Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters to the Edit My Details page, including AboutMe/RealName, AboutMe/Name, AboutMe/Quote,...

CVE-2012-6556: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...

CVE-2012-6555: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

CVE-2012-6557: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

Sony PSN Community Lithium Forums 2012 Q4 Script Insertion

Title: ====== Sony PSN Community - Mail Encoding Web Vulnerability Date: ===== 2013-05-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=748 VL-ID: ===== 748 Common Vulnerability Scoring System: ==================================== 3.1 Introduction: =============...

Sony PSN Community Lithium Forums 2012 Q4 XSS

Title: ====== Sony PSN Community - Persistent Web Vulnerability Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=746 VL-ID: ===== 746 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Sony PSN Community Lithium Forums 2012 Q4 Script Insertion

Title: ====== Sony PSN Community - Mail Encoding Web Vulnerability Date: ===== 2013-05-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=748 VL-ID: ===== 747 Common Vulnerability Scoring System: ==================================== 3.1 Introduction: =============...

CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

CVE-2013-3528

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."...

Sql injection

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

Design/Logic Flaw

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."...

CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...

CVE-2013-3528

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."...

CVE-2013-3528

Vanilla Forums prior to 2.0.18.6 is vulnerable to a PHP Object Injection in class.utilitycontroller.php (

CVE-2013-3528

Unspecified vulnerability in the update check in Vanilla Forums before 2.0.18.8 has unspecified impact and remote attack vectors, related to "object injection."...

CVE-2013-3527

Multiple SQL injection vulnerabilities in Vanilla Forums before 2.0.18.8 allow remote attackers to execute arbitrary SQL commands via the parameter name in the Form/Email array to 1 entry/signin or 2 entry/passwordrequest...