CVE-2007-0076

CVE-2007-0076 affects Openforum where the backend database (openforum.mdb) is stored under the web root due to insufficient access control. This allows remote attackers to download the database containing user passwords. The CVE is documented with a CVSSv2 base score of 7.5 (HIGH): Network attack...

openforum.txt

Discovered: Aria-Security Team Vendor: http://www.2enetworx.com/dev/projects/openforum.asp Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/path/openforum.mdb Contact: [email protected]...

Openforum Remote password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.2enetworx.com/dev/projects/openforum.asp Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/path/openforum.mdb Contact: advisory@aria-security....

CVE-2006-3321

Multiple cross-site scripting XSS vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ofdisp and 2 ofmsgid parameters...

CVE-2006-3321

Multiple cross-site scripting XSS vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ofdisp and 2 ofmsgid parameters...

CVE-2006-3321

The CVE-2006-3321 entry documents multiple cross-site scripting (XSS) vulnerabilities in the Web forum script openforum.asp. Affected product: OpenForum 1.2 Beta and earlier. Vulnerable component: openforum.asp; vulnerable parameters: (1) ofdisp and (2) ofmsgid. Impact stated: remote attackers ca...