CVE-2006-2214: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in 1 top.php and 2 member.php. NOTE: this issue has also been reported to affect 1.7.2...

CVE-2006-2216: Undefined Security Weakness

Open Bulletin Board OpenBB 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pforums parameter to 1 misc.php and 2 member.php...

OpenBB 1.0.8 Full Path Disclosure

OpenBB 1.0.8 Full Path Disclosure Bug Found By :- Devil-00 Gr33tz :- Www.securitygurus.neT Rock Master Hackers Pal n0m3rcy -= 1-2 =- Full Path Disclosure Exploits :- /OpenBB/misc.php?action=latest&pforums=D3vil-0x1 /OpenBB/member.php?action=online&&pforums=D3vil-0x1 Fix It :- misc.php Add This Li...

CVE-2006-2070

Cross-site scripting XSS vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action...

CVE-2006-2070: Undefined Security Weakness

Cross-site scripting XSS vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action...

DevBB <= 1.0.0 XSS

==================== Discovered by: Qex Date: 25 April 2006 ==================== /member.php?action=viewpro&member=XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the...

CVE-2006-2052

Cross-site scripting XSS vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the...

CVE-2006-2052: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the...

Cross site scripting

Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...

CVE-2006-2011: Undefined Security Weakness

Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...

CVE-2006-1917: Undefined Security Weakness

SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitrary SQL commands via the userID parameter...

Sql injection

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter...

CVE-2006-1805

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter...

CVE-2006-1805: Undefined Security Weakness

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter...

PowerClan 1.14 - SQL Injection

PowerClan 1.14 - SQL Injection -------------------------------------------------------- Software: PowerClan 1.14 Version: 1.14 Type: SQL Injection Date: Apr 13 23:37:50 CEST 2006 Vendor: powerscripts.org Page: http://www.powerscripts.org Risc: min credits: ---------------------------- d4igoro -...

MyBB 1.10 New CrossSiteScripting ' member.php '

//-- MyBB 1.10 New CrossSiteScripting ' member.php ' --// Webattack :- /mybb/member.php?action=dologin&username=usrname&password=pass&url="scriptalert1;/script //-- FixIT --// Open member.php GoTo Line :- 1030 .. if$mybb-input'url' redirect$mybb-input'url', $lang-redirectloggedin; Replace It With...

Sql injection

SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php...

CVE-2006-1708

CVE-2006-1708 describes an SQL injection in Clansys 1.1. The vulnerability is in member.php; the parameter shown on the member page is passed to index.php, enabling remote attackers to potentially execute arbitrary SQL commands. The connected documents consistently reference the same description,...

CVE-2006-1708: Undefined Security Weakness

SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php...