1688 matches found
[Full-disclosure] XOR Crew :: vBulletin ImpEx <= 1.74 - Remote Command Execution Vulnerability
======================================================================================= XOR Crew :: Security Advisory 3/22/2006 ======================================================================================= vBulletin ImpEx = 1.74 - Remote Command Execution Vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...
CVE-2006-1040
Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...
CVE-2006-1040
Cross-site scripting XSS vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php...
CVE-2006-1040
CVE-2006-1040 affects vBulletin versions 3.0.12 and 3.5.3. The vulnerability is a cross-site scripting (XSS) flaw where user-supplied content placed in the email field is injected into profile.php but not sanitized in sendmsg.php, enabling remote attackers to inject arbitrary web script or HTML t...
vBulletin < 3.5.4 HTML Injection
Binary data 3454.prm...
vbulletinXSSpasswd.txt
Summary Software: vBulletin Sowtwares Web Site: http://www.vBulletin.com Versions: 3.0.12-3.5.3 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by: imei addmimistrator Risk Level: Mediume -Description- There is a security bug in most powerfull & common...
vBulletin Email Field XSS
According to its banner, the version of vBulletin installed on the remote host does not properly sanitize user-supplied-input to the email field in the 'profile.php' script. Using a specially crafted email address in his profile, an authenticated attacker can leverage this issue to inject arbitra...
[KAPDA::#26]vBulletin.3.5.3~3.0.12-XSS
original advisories: http://www.kapda.ir/advisory-266.html http://myimei.com/security/2006-02-19/vbulletin3012353svalidemailxss-attack.html KAPDA New advisory Software: vBulletin Vendor: http://www.vBulletin.com Versions: 3.0.12-3.5.3 Class: Remote Status: Unpatched Exploit: Available Solution:...
vBulletin 3.03.5 - profile.php?Email HTML Injection
vBulletin 3.03.5 - profile.php?Email HTML Injection source: https://www.securityfocus.com/bid/16919/info vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...
vBulletin 3.0/3.5 - 'profile.php?Email' HTML Injection
source: https://www.securityfocus.com/bid/16919/info vBulletin is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...
Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
Hi everyone! the January 23 me was done work on revealing the criticality in forum vBulltin3.0.7 - 3.5.3 and IPB2.0.0 - 2.1.4. ------------------------------------------------------------------------- The Criticality were find nearly similar nature. Later I have tested them on rest version and th...
vBulletin 3.5.2 - Event Title HTML Injection
vBulletin 3.5.2 - Event Title HTML Injection source: https://www.securityfocus.com/bid/16116/info vBulletin is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...
vBulletin 3.5.2 - Event Title HTML Injection
source: https://www.securityfocus.com/bid/16116/info vBulletin is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...
Html_Injection in vBulletin 3.5.2
Vulnerable Version: 3.5.2 prior versions also may be affected Bug: HtmlInjection Second order CrossSiteScripting Exploitation: Remote with browser HtmlInjection : The software does not properly filter HTML tags in the title of events before being passed to user in 'calendar.php'&'reminder.php AS...
CVE-2005-4621
Cross-site scripting XSS vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg...
CVE-2005-4621
CVE-2005-4621 concerns a cross-site scripting (XSS) vulnerability in the editavatar page of vBulletin 3.5.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a URL provided in the remote avatar URL field, with the URL potentially triggering a parsing error and ...
CVE-2006-0080
CVE-2006-0080 describes a cross-site scripting (XSS) vulnerability in vBulletin 3.5.2 (and possibly earlier). The issue arises because user-provided data in the title of an event is not properly filtered by the calendar.php and reminder.php paths, enabling remote attackers to inject arbitrary web...
CVE-2006-0080
Cross-site scripting XSS vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by 1 calendar.php and 2 reminder.php...
Cross site scripting
Cross-site scripting XSS vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by 1 calendar.php and 2 reminder.php...