1688 matches found
CVE-2006-3253
Cross-site scripting XSS vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run...
CVE-2006-3253
CVE-2006-3253 affects vBulletin 3.5.x, with a Cross-site Scripting (XSS) vulnerability in member.php exploitable via the u parameter. The vendor disputes the report and reports inability to replicate; no public fix details are provided in the available documents. The issue is noted with a low CVS...
CVE-2006-3253
Cross-site scripting XSS vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run...
vbulXSS.txt
============================================= Discovered By: CrAzY CrAcKeR Site: www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /vb/member.php?u=XSS...
PT-2006-4147 · Vbulletin Solutions · Vbulletin
Name of the Vulnerable Software and Affected Versions: vBulletin versions 3.5.x Description: A cross-site scripting XSS issue in member.php allows remote attackers to inject arbitrary web script or HTML via the u parameter. The vendor has disputed this report, stating that they have been unable t...
vBulletin<<--v3.5.X "member.php" Cross Site Scripting
============================================= Discovered By: CrAzY CrAcKeR Site: www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:- /vb/member.php?u=XSS...
vBulletin 3.0.93.5.x - member.php Cross-Site Scripting
vBulletin 3.0.93.5.x - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18551/info Vbulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...
vBulletin 3.0.9/3.5.x - 'member.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18551/info Vbulletin is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...
vBulletin 2.x3.x - Multiple Cross-Site Scripting Vulnerabilities
vBulletin 2.x3.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/18444/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...
vBulletin 2.x/3.x - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/18444/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in...
Sql injection
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter...
CVE-2006-2805
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter...
CVE-2006-2805
CVE-2006-2805 affects VBulletin 3.0.10 and is caused by an SQL injection in the featureid parameter, enabling remote attackers to execute arbitrary SQL commands. Public records show impact to data integrity (partial) with no confidentiality or availability impact explicitly stated beyond the SQL ...
CVE-2006-2805
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter...
vBulletin 3.0.10 Version SQL Injection
vBulletin 3.0.10 Version SQL Injection SpC-x Credit : SpC-X Site : http://www.Cyber-security.org Code : http://www.target.com/path/portal.php?id=54&a=viewfeature&featureid=SQL Example :...
vBulletin 3.0.10 - 'Portal.php' SQL Injection
source: https://www.securityfocus.com/bid/18197/info vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
vBulletin 3.0.10 - Portal.php SQL Injection
vBulletin 3.0.10 - Portal.php SQL Injection source: https://www.securityfocus.com/bid/18197/info vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
View Topic Flood phpBB, MercuryBoard, Vbulletin, Ipb
Author: SpiderZ Exploit: http://spiderz.netsons.org/exploit/10.txt...
CVE-2006-2335
Jelsoft vBulletin accepts uploads of Cascading Style Sheets CSS and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed...
Code injection
Jelsoft vBulletin accepts uploads of Cascading Style Sheets CSS and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed...