598 matches found
CVE-2006-2167: Undefined Security Weakness
Cross-site scripting XSS vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element...
CVE-2006-2011
Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...
CVE-2006-2011: Undefined Security Weakness
Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...
CVE-2006-1958: Undefined Security Weakness
Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via 1 the forumreferrer cookie to register.php and 2 the messages parameter in messagelist.php...
WWWThread RC 3 MultBugs
code// --- WWWThread RC 3 MultBugs --- // D3vil-0x1 | Devil-00 www.securitygurus.net Gr33tz - HACKERS PAL | n0m3rcy | - & All Others i forgot them : //---------------------------------// //---------------------------------// Bug 1 //---------------------------------// // File name :- register.php...
CVE-2006-1815
CVE-2006-1815 affects Tritanium Bulletin Board (TBB) 1.2.3: register.php is vulnerable to reflected XSS via the newuser_realname and newuser_icq parameters in the faction=register flow (index.php), allowing remote script/HTML injection. This vector is distinct from CVE-2006-1768. Root cause cited...
CVE-2006-1815: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...
CVE-2006-1768: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newusername, 2 newuseremail, and 3 newuserhp parameters in the faction=register mode in index.php...
CVE-2006-1637
Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...
CVE-2006-1637
Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...
CVE-2006-1637: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...
Sql injection
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...
CVE-2006-1569
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...
CVE-2006-1568
Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...
CVE-2006-1569: Undefined Security Weakness
Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters to a login.php or b register.php; or 3 u parameter to c profile.php...
CVE-2006-1568: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 email, 2 location, or 3 website parameters...
CVE-2006-1568
RedCMS 0.1 is affected in register.php by multiple XSS vulnerabilities. The vulnerable parameters are email, location, and website, through which remote attackers can inject arbitrary web script or HTML. The reported issue affects RedCMS 0.1 and is documented across multiple sources; no explicit ...
Phorum < 5.0.18 XSS Vulnerability
Phorum contains a script called SPDX-FileCopyrightText: 2006 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phorum:phorum"; ifdescription...