EUVD-2010-4839

Malware in sbrugna...

NinkoBB CSRF Vulnerability

No description provided by source...

NinkoBB 1.3RC5 XSS Vulnerability

No description provided by source. Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross...

CVE-2010-4874

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

CVE-2010-4874

CVE-2010-4874 affects NinkoBB 1.3 RC5. Multiple XSS flaws in users.php allow injection of arbitrary script/HTML via parameters first_name, last_name, msn, and aim due to input sanitation error. This enables a remote attacker to execute scripts in a victim’s browser in the context of the vulnerabl...

CVE-2010-4874

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

CVE-2010-4874: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, 3 msn, or 4 aim parameter...

PT-2011-1809

Name of the Vulnerable Software and Affected Versions NinkoBB version 1.3 RC5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including first name, last...

NinkoBB 1.3RC5 Stored Cross Site Scripting

Exploit Title: NinkoBB 1.3RC5 stored XSS in Topic Subject field Date: 26-1-2011 Author: Saif El-Sherei Software Link: http://ninkobb.com/wiki/releases Version: NinkoBB 1.3RC5 Tested on: Firefox 3.0.15, , IE 8 Vendor Notified: 26-1-2011, awaiting vendor response. Google Dork: "Powered By...

NinkoBB 1.3RC5 XSS Vulnerability

Exploit for php platform in category web applications ================================ NinkoBB 1.3RC5 XSS Vulnerability ================================ Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010...

XSS in NinkoBB

Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

NinkoBB 1.3RC5 Cross Site Scripting

Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

NinkoBB 1.3RC5 - Cross-Site Scripting

NinkoBB 1.3RC5 - Cross-Site Scripting Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cro...

NinkoBB 1.3RC5 - Cross-Site Scripting

Vulnerability ID: HTB22652 Reference: http://www.htbridge.ch/advisory/xssinninkobb.html Product: NinkoBB Vendor: NinkoBB http://ninkobb.com Vulnerable Version: 1.3RC5 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Cross-site Scripting (XSS) Vulnerability in NinkoBB

High-Tech Bridge SA Security Research Lab has discovered vulnerability in NinkoBB which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in NinkoBB: CVE-2010-4874 The vulnerability exists due to input sanitation error in parameters...

NinkoBB (Setup Admin Account) Vulnerability

Exploit for php platform in category web applications =========================================== NinkoBB Setup Admin Account Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

NinkoBB - Cross-Site Request Forgery

NinkoBB - Cross-Site Request Forgery Title: NinkoBB CSRF Vulnerability Author: ADEO Security Published: 30/06/2010 Version: 1.3RC5 Possible all versions Vendor: http://ninkobb.com Download: http://ninkobb.com/releases/?NinkoBB-1.3RC5.zip Description: "NinkoBB is an open source forum script writte...

NinkoBB 1.3RC5 Cross Site Request Forgery

Title: NinkoBB CSRF Vulnerability Author: ADEO Security Published: 30/06/2010 Version: 1.3RC5 Possible all versions Vendor: http://ninkobb.com Download: http://ninkobb.com/releases/?NinkoBB-1.3RC5.zip Description: "NinkoBB is an open source forum script written in the PHP language and uses a MySQ...

NinkoBB - Cross-Site Request Forgery

Title: NinkoBB CSRF Vulnerability Author: ADEO Security Published: 30/06/2010 Version: 1.3RC5 Possible all versions Vendor: http://ninkobb.com Download: http://ninkobb.com/releases/?NinkoBB-1.3RC5.zip Description: "NinkoBB is an open source forum script written in the PHP language and uses a MySQ...