472 matches found
Phorum : Permanent Cross-Site Scripting Vulnerabilities
//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...
Phorum 5.2.11 - Persistent Cross-Site Scripting
Phorum 5.2.11 - Persistent Cross-Site Scripting //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the...
Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== Phorum Sysdream Testing XSS and span style="font-size: 20px;xss:expressionalertdocument.cook...
Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities
No description provided by source. //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and...
Phorum 5.2.11 Cross Site Scripting
//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...
Phorum 5.2.11 - Persistent Cross-Site Scripting
//----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and MySQL based Open Source forum...
Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities
This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Phorum 'image/bmp' MIME Type HTML Injection Vulnerability
According to its version number, the remote version of Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...
Phorum < 5.2.11 HTML Injection Vulnerability
Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Phorum Multiple Cross Site Scripting Vulnerabilities
According to its version number, the remote version of Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...
Phorum <= 5.2.10 Multiple XSS Vulnerabilities
Phorum is prone to multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...
Phorum多个跨站脚本漏洞
BUGTRAQ ID: 34551 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的管理控制台和文件上传模块没有正确地过滤用户所提交的请求参数，远程攻击者可以通过向论坛提交恶意的POST或GET请求执行跨站脚本攻击。 以下是include/admin/banlist.php文件中的有漏洞代码段： +++include/admin/banlist.php @@ 88:104 88 if$GET"curr" && $GET"delete" 89 90 ? 91 92 div...
Phorum < 5.2.10 Cross-Site Scripting/Request Forgery
=cicatriz [email protected]==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL:...
Phorum 5.2 - adminusers.php Multiple Cross-Site Scripting Vulnerabilities
Phorum 5.2 - adminusers.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these...
Phorum 5.2 - adminbadwords.php?curr Cross-Site Scripting
Phorum 5.2 - adminbadwords.php?curr Cross-Site Scripting source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal...
Phorum 5.2 - '/admin/users.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...
Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...
Phorum 5.2 - 'versioncheck.php?upgrade_available' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...
Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting
source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch other...
Phorum 5.2 - versioncheck.php?upgrade_available Cross-Site Scripting
Phorum 5.2 - versioncheck.php?upgradeavailable Cross-Site Scripting source: https://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issue...