Lantern CMS - 11-login.asp Cross-Site Scripting

Lantern CMS - 11-login.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/43865/info Lantern CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Lantern CMS - '11-login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43865/info Lantern CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Cross-site Scripting (XSS) Vulnerabilities in Lantern CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Lantern CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Lantern CMS 1.1 The vulnerability exists due to input sanitation error in the "signupemail...

Security holes : XMB Magic Lantern forum & DevBB

Hi all : Product 1 : XMB Magic Lantern forum 1.6b final http://www.xmbforum.com http://www.aventure-media.co.uk Problems : - Reading of logs files - XSS - Path Disclosure - Access to users/admins accounts - Logs distortion Exploits : - /indexlog.log - /cplogfile.log - If indexlog not chmod 777 =...

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting source: https://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves...

XMB Forum 1.6 pre-beta - Image Tag Script Injection

XMB Forum 1.6 pre-beta - Image Tag Script Injection source: https://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and...