CVE-2004-1588

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the 1 QuestionNumber and Category parameters to Forum.asp or 2 Username and Password parameter to LoginExec.asp...

CVE-2004-1589

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...

CVE-2004-1555

CVE-2004-1555 affects BroadBoard Instant ASP Message Board. The description documents multiple SQL injection flaws in the application, exploitable via specific parameters: keywords in search.asp, handle in profile.asp, txtUserHandle in reg2.asp, and txtUserEmail in forgot.asp. The underlying issu...

CVE-2004-1588

GoSmart Message Board (ASP) is affected by SQL injection in two input vectors: Forum.asp via QuestionNumber/Category and Login_Exec.asp via Username/Password. This enables remote execution of arbitrary SQL commands. Related OpenVAS entries also flag additional XSS and input-sanitization flaws, bu...

CVE-2004-1589

CVE-2004-1589 documents a cross-site scripting (XSS) vulnerability in GoSmart Message Board (ASP). The flaw allows remote attackers to inject and execute scripts via (1) Category on Forum.asp or (2) MainMessageID on ReplyToQuestion.asp. Connected sources corroborate XSS presence and relate GoSmar...

CVE-2004-1588

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the 1 QuestionNumber and Category parameters to Forum.asp or 2 Username and Password parameter to LoginExec.asp...

CVE-2004-1589

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...

waraxe-2004-SA037.txt

================================================================================ waraxe-2004-SA037 ================================================================================ Sql injection bug in Phorum 5.0.12 and older versions...

[SA13137] Infuseum ASP Message Board Unspecified Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

gosmart.txt

This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...

[Full-Disclosure] [MAxpatrol Security Advisory] Multiple vulnerabilities in GoSmart Message Board

This vulnerability was discovered by Positive Technologies using MaxPatrol www.maxpatrol.com - intellectual professional security scanner. It is able to detect a substantial amount of vulnerabilities not published yet. MaxPatrol's intelligent algorithms are also capable to detect a lot of...

GoSmart Message Board Multiple Vulnerabilities (SQLi, XSS)

The remote host is running GoSmart message board, a bulletin board manager written in ASP. The remote version of this software contains multiple flaws, due to a failure of the application to properly sanitize user-supplied input. It is also affected by a cross-site scripting vulnerability. As a...

BroadBoard Message Board SQL Injection

Binary data 2329.prm...

[Full-Disclosure] SQL injection in BroadBoard Instant ASP Message Board

BroadBoard Instant ASP Message Board URL: http://www.broadboard.com/ 1. software does not properly validate user-supplied input in the 'keywords' parameter in search.asp: http://broadboard/forum/search.asp?archives=1&action=1&keywords='SQL code&method=1&method=1&body=1&subject=1&board=1&results=1...

BroadBoard Message Board Detection

Binary data 2328.prm...

FreezingCold Broadboard - 'profile.asp' SQL Injection

source: https://www.securityfocus.com/bid/11250/info Reportedly BroadBoard Message Board is affected by multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied URI input prior to using it in an SQL query. An attacker may...

MercuryBoard < 1.1.3 Multiple Vulnerabilities

Binary data 2627.prm...

[Full-Disclosure] [waraxe-2004-SA#019 - Critical sql injection bug in Phorum 3.4.7]

================================================================================ waraxe-2004-SA019 ================================================================================ Critical sql injection bug in Phorum 3.4.7...

Ultimate PHP Board add.php Direct Request Information Disclosure

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version that could allow an attacker to view private message board information. %NASLMINLEVEL 70300 This script was written by Erik Stephens See the Nessus Scripts License for details Changes by Tenable: - Revised plugin...

Множество уязвимостей в ChitChat Message Board

Множество уязвимостей в ChitChat Message Board Название скрипта: ChitChat Message Board Уязвимая версия: = v.2.8 Сайт производителя: http://www.cyber-cats.com/php Автор: Jaime Kartak Найдено: ziGGy Дата: 21st December 2003 ============ Introduction ============ ChitChat Message Board - симпатична...