234 matches found
Multiple Vulnerabilities in MercuryBoard
The remote host is running MercuryBoard, a message board system written inPHP. Multiple vulnerabilities have been discovered in the product that allow an attacker to cause numerous cross site scripting attacks, inject arbitrary SQL statements and disclose the path under which the product has been...
phorum5x.txt
======================================================================================= XOR Crew :: Security Advisory 9/1/2005 ======================================================================================= Phorum 5.x Multiple XSS and Session Hijacking Vulnerabilities...
easymsgb_advisory.txt
============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...
CVE-2005-2299
Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...
CVE-2005-2299
CVE-2005-2299 affects Simple Message Board Version 2.0 Beta 1 and describes multiple XSS flaws exposed via parameters: FID (forum.cfm), UID (user.cfm), TID (thread.cfm), and PostDate (search.cfm). The vulnerability allows remote injection of arbitrary script/HTML. CVSS details in the entry indica...
CVE-2005-2299
Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...
CVE-2005-2299: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...
XSS in forums Simple Message Board Version 2.0 Beta 1
This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=scriptJavaScript:alertdocument.cookie;/script...
Simple Message Board 2.0 beta1 - Forum.cfm Cross-Site Scripting
Simple Message Board 2.0 beta1 - Forum.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14266/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...
Simple Message Board 2.0 beta1 - Thread.cfm Cross-Site Scripting
Simple Message Board 2.0 beta1 - Thread.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14268/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...
Simple Message Board 2.0 beta1 - 'Forum.cfm' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14266/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
Simple Message Board 2.0 beta1 - 'Search.cfm' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14269/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
Simple Message Board 2.0 beta1 - 'User.cfm' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14267/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
Simple Message Board 2.0 beta1 - Search.cfm Cross-Site Scripting
Simple Message Board 2.0 beta1 - Search.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14269/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...
Simple Message Board 2.0 beta1 - User.cfm Cross-Site Scripting
Simple Message Board 2.0 beta1 - User.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14267/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may levera...
Simple Message Board 2.0 beta1 - 'Thread.cfm' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14268/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
CVE-2002-1902
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service infinite recursion by creating a message board post that is a child of an outdated parent...
CVE-2002-1902: Undefined Security Weakness
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service infinite recursion by creating a message board post that is a child of an outdated parent...
CVE-2002-1733
Technical details are not publicly available in the provided documents for CVE-2002-1733. Monitor for updates; no confirmed affected products, versions, or fixes are specified in the supplied sources.