PBLang 4.65 Bulletin Board System - 'SetCookie.php' Directory Traversal

source: https://www.securityfocus.com/bid/14765/info PBLang is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality. Information...

PBLang Bulletin Board < 4.66z Multiple Vulnerabilities

Binary data 3204.prm...

CVE-2005-0526

Multiple cross-site scripting XSS vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via 1 the search string to search.php, 2 the subject of a PM, which is processed by pm.php, or 3 the body of a PM, which is processed by pmpshow.php...

CVE-2005-0631

delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters...

CVE-2005-0631

CVE-2005-0631 affects PBLang BBS (version around 4.63) with a vulnerability in delpm.php where a logged-in, remote user can delete arbitrary personal messages by altering the id and a parameters. The issue stems from improper handling of these parameters, enabling unauthorized PM deletion within ...

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter...

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

HRG008.txt

HRG - Hackerlounge Research Group Release: HRG008 Monday 03/01/05 Software PBLang 4.63 sendpm.php reply file read The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and earlier?...

HRG009.txt

HRG - Hackerlounge Research Group Release: HRG009 Monday 03/01/05 Software PBLang 4.63 delpm.php authentication problem The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and...

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter...

CVE-2005-0631

delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters...

PBLang Bulletin Board System 4.x - SendPM.php Directory Traversal

PBLang Bulletin Board System 4.x - SendPM.php Directory Traversal source: https://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A...

PBLang Bulletin Board System 4.x - 'DelPM.php' Arbitrary Personal Message Deletion

source: https://www.securityfocus.com/bid/12694/info PBLang is reported prone to a vulnerability that can allow a registered user to delete arbitrary personal messages. The vulnerability exists due to a design error leading to a lack of access controls...

Software PBLang 4.63 sendpm.php reply file read vulnerability

HRG - Hackerlounge Research Group Release: HRG008 Monday 03/01/05 Software PBLang 4.63 sendpm.php reply file read The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and earlier?...

PBLang Bulletin Board System 4.x - DelPM.php Arbitrary Personal Message Deletion

PBLang Bulletin Board System 4.x - DelPM.php Arbitrary Personal Message Deletion source: https://www.securityfocus.com/bid/12694/info PBLang is reported prone to a vulnerability that can allow a registered user to delete arbitrary personal messages. The vulnerability exists due to a design error...

Software PBLang 4.63 delpm.php authentication vulnerability

HRG - Hackerlounge Research Group Release: HRG009 Monday 03/01/05 Software PBLang 4.63 delpm.php authentication problem The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.63 and...

Software PBLang 4.65 pmpshow.php XSS vulnerability

HRG - Hackerlounge Research Group Release: HRG002 Friday 11-02-05 Software PBLang 4.65 pmpshow.php XSS vulnerability The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.65 current a...

PBLang Bulletin Board Multiple HTML Injection and XSS

Binary data 2643.prm...

Software PBLang 4.65 search.php XSS vulnerability

HRG - Hackerlounge Research Group Release: HRG001 Friday 11-02-05 Software PBLang 4.65 search.php XSS vulnerability The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.65 current an...

Software PBLang 4.65 pm.php XSS vulnerability

HRG - Hackerlounge Research Group Release: HRG003 Friday 11-02-05 Software PBLang 4.65 pm.php XSS vulnerability The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: PBLang 4.65 current and...