CVE-2010-1629

Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...

CVE-2010-1629: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...

Phorum过滤引擎HTML代码注入漏洞

BUGTRAQ: 35777 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的过滤引擎没有充分地验证某些BBcode参数，远程攻击者可以在所提交的请求中使用导致注入并执行恶意JavaScript代码。 Phorum 5.2.11 厂商补丁： Phorum ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phorum.org/phorum5/read.php?64,139411...

Phorum < 5.2.12a Multiple BBCode HTML Injection Vulnerabilities

Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Phorum Multiple BBCode HTML Injection Vulnerabilities

Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials and...

Phorum : Permanent Cross-Site Scripting Vulnerabilities

//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...

Phorum 5.2.11 Cross Site Scripting

//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...

Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Phorum Sysdream Testing XSS and span style="font-size: 20px;xss:expressionalertdocument.cook...

Phorum &lt;= 5.2.11 Permanent Cross Site Scripting Vulnerabilities

No description provided by source. //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and...

Phorum 5.2.11 - Persistent Cross-Site Scripting

Phorum 5.2.11 - Persistent Cross-Site Scripting //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the...

Phorum 5.2.11 - Persistent Cross-Site Scripting

//----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and MySQL based Open Source forum...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Phorum < 5.2.11 HTML Injection Vulnerability

Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Phorum 'image/bmp' MIME Type HTML Injection Vulnerability

According to its version number, the remote version of Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...

Phorum <= 5.2.10 Multiple XSS Vulnerabilities

Phorum is prone to multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Phorum Multiple Cross Site Scripting Vulnerabilities

According to its version number, the remote version of Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...

Phorum多个跨站脚本漏洞

BUGTRAQ ID: 34551 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的管理控制台和文件上传模块没有正确地过滤用户所提交的请求参数，远程攻击者可以通过向论坛提交恶意的POST或GET请求执行跨站脚本攻击。 以下是include/admin/banlist.php文件中的有漏洞代码段： +++include/admin/banlist.php @@ 88:104 88 if$GET"curr" && $GET"delete" 89 90 ? 91 92 div...

Phorum &lt; 5.2.10 Cross-Site Scripting/Request Forgery

=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...

Phorum 5.2 - adminbanlist.php?curr Cross-Site Scripting

Phorum 5.2 - adminbanlist.php?curr Cross-Site Scripting source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal...

Phorum 5.2 - adminbadwords.php?curr Cross-Site Scripting

Phorum 5.2 - adminbadwords.php?curr Cross-Site Scripting source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal...