JBoard <= 2.0 Commercial Version Sql/Xss Vulnerability

Exploit for unknown platform in category web applications ====================================================== JBoard Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By :...

CVE-2009-3060

CVE-2009-3060 affects Joker Board (aka JBoard) 2.0 and earlier. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through specific user input vectors: the notice parameter in editform.php, edit_user_messa...

CVE-2009-3059

CVE-2009-3059 concerns Joker Board (aka JBoard) 2.0 and earlier, where multiple SQL injection vulnerabilities exist. The affected components are (1) core/select.php and (2) the city parameter to top_add.inc.php, reachable via sboard.php. The impact described in the sources is that remote attacker...

CVE-2009-3059: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 core/select.php or 2 the city parameter to topadd.inc.php, reachable through sboard.php...

CVE-2009-3060: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the notice parameter to editform.php, 2 the editusermessage parameter to core/editusermessage.php, or 3 the usertitle parameter to...

JBoard - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/42425/info JBoard is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how t...

JBoard 2.0 SQL Injection

================================================ JBoard Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + Support e-mail : submitatinj3ct0r.co...