Cross site scripting

Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...

CVE-2008-2744

Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...

CVE-2008-2744

CVE-2008-2744 is a cross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1. The technical detail available states an arbitrary script injection via unknown vectors, with the vector probably in the redirect parameter to admincp/index.php. The connected documents confirm the affected...

CVE-2008-2744

Cross-site scripting XSS vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to inject arbitrary web script or HTML via unknown vectors and an "obscure method." NOTE: the vector is probably in the redirect parameter to the Admin Control Panel admincp/index.php...

Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...

vBulletin 3.6.103.7.1 - redirect Cross-Site Scripting

vBulletin 3.6.103.7.1 - redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/29704/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

vBulletin 3.6.10/3.7.1 - 'redirect' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29704/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

vbulletin-xss.txt

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...

CVE-2008-2460

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...

Sql injection

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...

CVE-2008-2460

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...

CVE-2008-2460

CVE-2008-2460 is an SQL injection vulnerability affecting vBulletin 3.7.0 Gold . The flaw is in faq.php where the q parameter in a search action is vulnerable, enabling remote attackers to execute arbitrary SQL commands . NVD lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authen...

Vbulletin 3.7.0 Gold >> Sql injection on faq.php

By : Ali JasbiHackerz.ir security & hacking research team Vendor : vbulletin.org version : 3.7.0 Gold Vulnerability: Sql injection http://www.domain.com/vBulletin/faq.php?s=&do=search&q=Sql injection&match=any&titlesonly=1 test it: faq.php?s=&do=search&q='&match=any&titlesonly=1...

osdata-lfi.txt

========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osData <= 2.08 Modules Php121 Local File Inclusion Vulnerability

No description provided by source. ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro , http://www.Hackteach.org/cc/...

osData 2.08 Modules Php121 - Local File Inclusion

osData 2.08 Modules Php121 - Local File Inclusion ========================================================================= osData = 2.08 Modules Php121 Local File Include Vulnerability ========================================================================= Found by : Cold z3ro ,...

vBulletin 3.6.1 Remote SQL Injection Exploit

Exploit for perl platform in category web applications ============================================ vBulletin 3.6.1 Remote SQL Injection Exploit ============================================ !/usr/bin/perl use IO::Socket; print q DeluxeBB Remote SQL Injection Exploit vbulletin Remote SQL Injection...

vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable

-------------------------------------------------------------------------------------- title : vBTube v1.1 - Beta Vbulletin Tube Xss Vulnerable Author : CrackersChild [email protected] Exploit : vBTube.php?do=search&search=scriptalertdocument.cookie/script Dork : inurl:vBTube.php...

CVE-2002-2235

CVE-2002-2235 affects vBulletin 2.2.9 and earlier, where member2.php mishandles the $perpage parameter by not enforcing an integer type. This can cause an error message to be reflected back to the user without quoting, facilitating cross-site scripting (XSS) and potentially other attacks. Connect...

CVE-2002-2235

member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting XSS and possibly other attacks...