ASP-DEV XM Forum RC3 - IMG Tag Script Injection

source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script code in a user's browser. XM Forum RC3 is report...

ASP-DEV XM Forum RC3 - IMG Tag Script Injection

ASP-DEV XM Forum RC3 - IMG Tag Script Injection source: https://www.securityfocus.com/bid/12958/info XM Forum is reported prone to a script injection vulnerability. An attacker can supply arbitrary HTML and script code through the BBCode IMG tag to trigger this issue and execute arbitrary script...

CVE-2005-0692

PHP-Fusion 5.x is affected by CVE-2005-0692 due to an XSS vulnerability in fusion_core.php. An attacker can inject arbitrary web script or HTML via a message containing an IMG BBCode that carries character-encoded Javascript, which will execute in the victim’s browser when the malicious BBCode is...

CVE-2005-0692

Cross-site scripting XSS vulnerability in fusioncore.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript...

PHP-Fusion < 5.01 BBcode IMG Tag XSS

Binary data 2682.prm...

PHP-Fusion 5.0 - BBCode IMG Tag Script Injection

PHP-Fusion 5.0 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/12751/info PHP-Fusion is reported prone to a script injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input prior to including it in dynamically...

PHP-Fusion 5.0 - BBCode IMG Tag Script Injection

source: https://www.securityfocus.com/bid/12751/info PHP-Fusion is reported prone to a script injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input prior to including it in dynamically generated content. An attacker can supply ASCII...

CVE-2005-0692

Cross-site scripting XSS vulnerability in fusioncore.php for PHP-Fusion 5.x allows remote attackers to inject arbitrary web script or HTML via a message with IMG bbcode containing character-encoded Javascript...

CVE-2004-1594

CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...

CVE-2004-1537

PHP-Kit 1.6.03–1.6.1 contains an XSS flaw in popup.php via the img parameter, enabling remote script execution. Multiple connected advisories corroborate XSS within PHP-Kit

CVE-2004-2625

Cross-site scripting XSS vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag...

CVE-2004-2015

Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...

PunBB IMG Tag Client Side Scripting XSS

The remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate the IMG tag. With a specially crafted URL, an attacker can cause arbitrary code execution within a user's browser, resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable...

Mozilla Firefox < 1.0.0 IMG Tag Multiple Vulnerabilities (deprecated)

Binary data 2402.prm...

YaBB 1.x9.1.2000 - Administrator Command Execution

YaBB 1.x9.1.2000 - Administrator Command Execution source: https://www.securityfocus.com/bid/11214/info It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative command...

YaBB 1.x/9.1.2000 - Administrator Command Execution

source: https://www.securityfocus.com/bid/11214/info It is reported that YaBB is affected by an administrator command execution vulnerability. This issue is due to a failure of the application to properly validate access to administrative commands. This issue permits a remote attacker to create a...

CVE-2002-1348

CVE-2002-1348 affects w3m prior to 0.3.2.2, where HTML escaping in IMG ALT attributes is insufficient, potentially allowing remote attackers to access local files or cookies. Connected advisories (Debian DSA for w3m/w3mmee) confirm multiple Debian advisories addressing this vulnerability and indi...

CVE-2002-1493

The CVE-2002-1493 entry describes a cross-site scripting (XSS) vulnerability in the Lycos HTMLGear guestbook. The flaw allows remote attackers to inject arbitrary JavaScript via (1) STYLE attributes or (2) SRC attributes in an IMG tag. The provided sources confirm the vulnerability description bu...

BiTBOARD IMG BBCode Tag JavaScript XSS

Binary data 2524.prm...

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...