CVE-2002-0474

ZeroForum 1.0 contains a Cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary JavaScript in a victim’s browser by embedding code in the IMG tag within posts. Root cause: inadequate filtering of content inside image tags, enabling script execution when other users view...

CVE-2002-0535

CVE-2002-0535 covers cross-site scripting in PostBoard 2.0.1 and earlier. The vulnerability enables remote attackers to execute script in the context of other users via (1) an IMG tag when BBCode is enabled, or (2) in a topic title. Documents confirm affected software/version and the underlying a...

CVE-2002-0591

CVE-2002-0591 refers to a directory-traversal vulnerability in AOL Instant Messenger (AIM) up to and including version 4.8 beta and earlier . The flaw allows a remote attacker to create arbitrary files and execute commands via a Direct Connection using an IMG tag with a SRC attribute that specifi...

CVE-2002-0475

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message...

CVE-2002-0520

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag...

CVE-2002-0474

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag...

CVE-2002-0475: Undefined Security Weakness

Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message...

CVE-2002-0474: Undefined Security Weakness

Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag...

CVE-2002-0413: Undefined Security Weakness

Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script...

CVE-2002-0591: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename...

CVE-2002-0520: Undefined Security Weakness

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag...

CVE-2002-0500: Undefined Security Weakness

Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size...

Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar

phpBB2 Cross Site Scripting Vulnerability -------------------------------------------- Affected Program: phpBB2 version 2.0.0 possibly earlier versions too, but not tested Vendor: http://www.phpbb.com Vendor Status: informed on 24/04/2002, fixed issued on 20/05/2002 Discovery Date: 24/04/2002...

CVE-2002-0316

The connected Nessus NASL confirms that XMB Forum (PHP) versions older than 1.9.1 are affected by multiple cross-site scripting (XSS) flaws, including CVE-2002-0316. The vulnerability allows an attacker to inject scripts that run in the context of other XMB users’ browsers. Affected software: XMB...

CVE-2002-0316: Undefined Security Weakness

Cross-site scripting vulnerability in eXtreme message board XMB 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag...

CVE-2002-0328: Undefined Security Weakness

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag...

PostBoard 2.0 - BBCode IMG Tag Script Injection

PostBoard 2.0 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/4559/info PostBoard is a freely available, open source message board module for the PostNuke content management system. It is designed for use on the Unix and Linux operating systems. PostBoard does not...

PostBoard 2.0 - BBCode IMG Tag Script Injection

source: https://www.securityfocus.com/bid/4559/info PostBoard is a freely available, open source message board module for the PostNuke content management system. It is designed for use on the Unix and Linux operating systems. PostBoard does not sanitize code submitted to site between IMG tags. Du...

AOL Instant Messenger 4.x - Arbitrary File Creation

AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...

CVE-2002-0118

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...