2099 matches found
CVE-2006-0501
The CVE-2006-0501 entry describes a cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0, exploitable via the Name field during user registration. The underlying issue is lack of proper input sanitization/escaping in the registration flow, enabling remote attackers to inject arbitrary s...
CVE-2006-0501
Cross-site scripting XSS vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user...
[SA18544] MyBB "Allow HTML in Signatures" Script Insertion Security Issue
TITLE: MyBB "Allow HTML in Signatures" Script Insertion Security Issue SECUNIA ADVISORY ID: SA18544 VERIFY ADVISORY: http://secunia.com/advisories/18544/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...
Night cat article system Version 2.1.0 cross site & injection vulnerability-vulnerability warning-the black bar safety net
Articles have been published in thehack the x-Files2 0 0 6 in the first period Cross-site vulnerability: night cat article system code amount is not very large, then we will from the most basic to start it, open the registration page to register. php see the following code if $POSTaction ==...
From PHP Forum the vulnerability of the endoscope security management-vulnerability warning-the black bar safety net
From: ReJeCt‘s Blog Blue magic Forum is a PHP Forum in the country is widely used. Due to its user registration module in some code defect that can lead to a malicious attacker will be normal users to elevate to administrator. First let's look at an invasion of the examples. The invasion paradigm...
CVE-2005-4007
Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...
CVE-2005-4007
Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...
CVE-2005-4007
SAPID CMS prior to 1.2.3.03 contains multiple unspecified vulnerabilities related to newly registered users and possible authorization checks, affecting the files mvc/controller/user_request_analysis.inc.php and usr/xml/ddc/authorization.xml. The exact impact and exploit paths are not detailed in...
PT-2005-4743 · Sapid · Sapid Cms
Name of the Vulnerable Software and Affected Versions: SAPID CMS versions prior to 1.2.3.03 Description: The issue involves multiple unspecified vulnerabilities related to newly registered users and possibly authorization checks. These vulnerabilities have unknown impact and attack vectors,...
CVE-2003-1252
The CVE-2003-1252 entry covers a vulnerability in register.php of S8Forum 3.0 where remote attackers can trigger arbitrary PHP execution by creating a user whose name ends in .php and placing commands in the E-mail field. This creates a web-accessible .php file that can be invoked to run commands...
[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability
------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...
Net Portal Dynamic System <= 5.0 (register users) Denial of Service
Exploit for multiple platform in category dos / poc =================================================================== Net Portal Dynamic System = 5.0 register users Denial of Service =================================================================== !/usr/bin/perl Type|+ Register multiple user...
CVE-2005-2894
Cross-site scripting XSS vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field...
CVE-2005-2894
PBLang 4.65 (and possibly earlier) contains a Cross-site scripting (XSS) vulnerability in the user registration process. The flaw allows remote attackers to inject arbitrary web script or PHP via the location field, as described in CVE-2005-2894. The NVD entry lists this as a MEDIUM-severity issu...
phpBB 2.0.15 - Register Multiple Users (Denial of Service) (C)
phpBB 2.0.15 - Register Multiple Users Denial of Service C / -------------------------------------------------------- Neo Security Team NST® - Advisory 15 - 00/00/06 -------------------------------------------------------- Program: phpBB 2.0.15 Homepage: http://www.phpbb.com Vulnerable Versions:...
phpBB <= 2.0.15 Register Multiple Users Denial of Service (perl code)
Exploit for unknown platform in category web applications ===================================================================== phpBB = 2.0.15 Register Multiple Users Denial of Service perl code ===================================================================== !/usr/bin/perl Name: NsT-phpBBDo...
hosting061.txt
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9...
CVE-2005-1654
CVE-2005-1654 affects Hosting Controller 6.1 Hotfix 1.9 and earlier. The vulnerability allows remote attackers to register arbitrary users by issuing a direct request to addsubsite.asp with the loginname and password parameters set, enabling unauthorized account creation. Related documentation ci...
Woltlab Burning Board SQL Injection Vulnerability
GulfTech Security Research May 16th, 2005 Vendor : Woltlab GmbH URL : http://www.woltlab.de/ Version : Burning Board 2. And Earlier Risk : SQL Injection Vulnerabilities Description: Burning Board is a popular, multi purpose forum / community software offered by WoltLab GmbH. There is an SQL...