Admin Phorum 3.3.1a - del.php?include_path Remote File Inclusion

Admin Phorum 3.3.1a - del.php?includepath Remote File Inclusion Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Li...

XXS in script Phorum

======================================================================= title: XXS in script Phorum homepage: www.phorum.org found: 2007-02-25 by: Crackman ================================================= exemple: http://www.site.com/path/admin.php?upgradefile="scriptalertdocument.cookie;/script...

Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================= Admin Phorum 3.3.1a del.php includepath RFI Vulnerability ============================================================ Admin Phorum 3.3.1.a del.php includepathFile Include...

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php"; Exploit:...

CVE-2007-0769

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

Cross site scripting

Cross-site scripting XSS vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6968

Cross-site scripting XSS vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0767

Cross-site scripting XSS vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0769

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

CVE-2007-0769

Phorum 5.1.18 contains an XSS vulnerability in register.php (CVE-2007-0769). The vulnerability is described as allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The vendor disputes the flaw, stating that characters are escaped properly. Public details do not spec...

CVE-2007-0767

Phorum CVE-2007-0767 is an XSS vulnerability in the core of Phorum prior to version 5.1.18, allowing remote attackers to inject arbitrary script or HTML via unspecified vectors. The available sources indicate impact to confidentiality, integrity, and availability (partial), with network access an...

CVE-2006-6968

Cross-site scripting XSS vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6968

CVE-2006-6968 describes a cross-site scripting (XSS) vulnerability in the group moderation control center page of Phorum prior to 5.1.19. The affected component is the group moderation control center page, with the underlying cause being an XSS flaw that could allow remote attackers to inject arb...

CVE-2007-0767

Cross-site scripting XSS vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2007-2219 · Phorum · Phorum

Name of the Vulnerable Software and Affected Versions: Phorum version 5.1.18 Description: A cross-site scripting XSS issue in the register.php file allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vendor disputes this issue, stating that characters are...

Phorum HTML Injection Vulnerability

Phorum HTML Injection Vulnerability Phorum is a web based message board written in PHP. Phorum is designed with high-availability and visitor ease of use in mind. Features such as mailing list integration, easy customization and simple installation make Phorum a powerful add-in to any website...

Phorum < 5.1.19 register.php XSS

Binary data 3898.prm...

CVE-2006-6550

CVE-2006-6550 affects Phorum 3.2.11 and earlier, describing a PHP remote file inclusion vulnerability in common.php that could allow an attacker to execute arbitrary PHP code via a URL in the db_file parameter. The CVE entry notes a dispute about the vulnerability because db_file is defined befor...

CVE-2006-6550

PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...