2623 matches found
CVE-2006-0438
Cross-site request forgery CSRF vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode IMG are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to 1 admin/adminusers.php and 2...
CVE-2006-0438
Cross-site request forgery CSRF vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode IMG are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to 1 admin/adminusers.php and 2...
CVE-2005-4613
Cross-site scripting XSS vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified fields in the user edit profile...
IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation
---------------------------------------------------------------------- IRM Security Advisory No. 013 Ultraapps Issue Manager is vulnerable to Privilege Escalation Vulnerablity Type / Importance: Privilege Escalation / High Problem discovered: November 25th 2005 Vendor contacted: November 25th 200...
PunBB < 1.2.8 Multiple Vulnerabilities
According to its banner, the version of PunBB installed on the remote host suffers from several flaws. - A File Include Vulnerability The application fails to validate the 'language' parameter when a user updates his profile and uses that throughout the application to require PHP code in order to...
multiVulns.txt
Multi-CMS/Forum Vulnability's Found by ap0c hackers pacifico & ratboy Yo! Ok, well a couple new vulnabilitys have been found by.. us : ------------------ First; e107 xss--- ------------------ link=http://w000000w00tw00t/asdadLIlink= onMouseOver='alertdocument.cookie;'...
CVE-2005-2193
SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being...
CVE-2005-2193
CVE-2005-2193 affects PunBB up to version 1.2.5, where the profile.php:temp parameter is not initialized/sanitized before being used in a database query, enabling remote SQL injection. The root cause is improper handling of the temp array, allowing attacker-controlled input to influence SQL state...
PunBB 1.x - profile.php User Profile Edit Module SQL Injection
PunBB 1.x - profile.php User Profile Edit Module SQL Injection source: https://www.securityfocus.com/bid/14195/info PunBB is affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input through the user profile edit module o...
[SA15936] phpSlash "author_id" User Profile Manipulation Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PunBB 1.x - 'profile.php' User Profile Edit Module SQL Injection
source: https://www.securityfocus.com/bid/14195/info PunBB is affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input through the user profile edit module of the 'profile.php' script before using it in a SQL query...
CVE-2005-1811
Cross-site scripting XSS vulnerability in usercp.php for MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile...
CVE-2005-1811
Cross-site scripting XSS vulnerability in usercp.php for MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile...
MyBB 1.0 RC4 XSS Bug
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
Hosting Controller < 6.1 Hotfix 2.1 Multiple Vulnerabilities
According to its version number, the version of Hosting Controller on the remote host suffers from multiple vulnerabilities: - An authenticated user can modify another user's profile, even an admin's, recover his/her password, and then gain access to the affected application as that user. - An...
Hosting Controller 6.1 - User Profile Unauthorized Access
Hosting Controller 6.1 - User Profile Unauthorized Access source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application ...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (3rd)
Exploit for unknown platform in category web applications ==================================================================== Hosting Controller Username : emailaddress : firstname : 0day.today 2018-03-09...
Hosting Controller 0.6.1 - User Registration (3)
Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (3rd)
No description provided by source. !-- Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "UserProfile.asp" that an authenticated user can change other's profiles. Why is it dangerous: a user can change other's email address and then...