Phpbb 2.0.7a And Earlier Secuity Issues

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.7a && Earlier Risk : Multiple Vulnerabilities Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

phpBB profile.php Cross Site Scripting Vulnerability

Advisory Name : phpBB profile.php Cross Site Scripting Vulnerability Release Date : Mar 21,2004 Application : phpBB Version : phpBB 2.0.6d or others? Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Cheng Peng Suapplesoupatmsn.com Proof of Conecpt: This vuln is in profile.php,when you...

[waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c]

================================================================================ waraxe-2004-SA009 ================================================================================ Non-critical Sql injection and XSS bug in PhpBB 2.0.6c...

phpBB 1.x2.0.x - Multiple Input Validation Vulnerabilities

phpBB 1.x2.0.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/9942/info It has been reported that phpBB may be prone to multiple vulnerabilities that could allow an attacker to carry out SQL injection and cross-site scripting attacks. These vulnerabilities...

phpBB 1.x/2.0.x - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/9942/info It has been reported that phpBB may be prone to multiple vulnerabilities that could allow an attacker to carry out SQL injection and cross-site scripting attacks. These vulnerabilities result from insufficient sanitization of user-supplied input...

multiple vulnerabilities in phpBB

Users with admin rights can severly damage an phpBB installation, potentially triggered by viewing a page with a malicious link sent by an attacker...

phpBB < 2.0.7a - Multiple Vulnerabilities

phpBB Multiple Vulnerabilities Vendor: phpBB Group Product: phpBB Version: = 2.0.7a Website: http://www.phpbb.com BID: 9942 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and...

phpBB 2.0.7a - Multiple Vulnerabilities

phpBB 2.0.7a - Multiple Vulnerabilities phpBB Multiple Vulnerabilities Vendor: phpBB Group Product: phpBB Version: = 2.0.7a Website: http://www.phpbb.com BID: 9942 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a...

CVE-2004-0339

Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...

CVE-2004-0339

CVE-2004-0339 : A cross-site scripting (XSS) flaw exists in phpBB’s ViewTopic.php, affecting possibly 2.0.6c and earlier. The vulnerability allows an attacker to execute arbitrary script or HTML as other users via the postorder parameter. Other connected records corroborate the same description (...

CVE-2004-0339: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...

phpBBXSS206d.txt

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.6d && Earlier Risk : Cross Site Scripting Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

[SCAN Associates Sdn Bhd Security Advisory] phpBB 2.0.6 and below sql injection

Products: phpBB 2.0.6 and below http://www.phpbb.com Found date: 4 January 2004 Publish date: 15 March 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary:...

phpBB 2.0.6d && Earlier Security Issues

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.6d && Earlier Risk : Cross Site Scripting Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

phpBB < 2.0.7 Multiple XSS

There are cross-site scripting vulnerabilities in the files 'ViewTopic.php' and 'ViewForum.php' in the remote installation of phpBB. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12093; scriptversion"1.27";...

phpBB 2.0.6d - Cross Site Scripting

phpBB 2.0.6d - Cross Site Scripting phpBB Cross Site Scripting Vendor: phpBB Group Product: phpBB Version: = 2.0.6d Website: http://www.phpbb.com/ BID: 9865 9866 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a...

phpBB < 2.0.6d - Cross Site Scripting

phpBB Cross Site Scripting Vendor: phpBB Group Product: phpBB Version: = 2.0.6d Website: http://www.phpbb.com/ BID: 9865 9866 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and...

phpBB session table exhaustion

The includes/sessions.php unnecessarily adds session item into session table and therefore vulnerable to a denial-of-service attack...

New phpBB ViewTopic.php Cross Site Scripting Vulnerability

Advisory Name:New phpBB ViewTopic.php Cross Site Scripting Vulnerability Release Date: Feb 29,2004 Application: phpBB Platform: PHP Version Affected: the lastest version Vendor URL: http://www.phpbb.com/ Discover: Cheng Peng Suapplesoupatmsn.com Details: This vuln is similar to Arab VieruZ's...

phpBB 1.x/2.0.x - 'search.php?search_results' SQL Injection

source: https://www.securityfocus.com/bid/9883/info A vulnerability has been reported to exist in the software that may allow a remote user to inject malicious SQL syntax into database queries. The problem reportedly exists in one of the parameters of the search.php script. This issue is caused b...