185 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
Cross site scripting
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies...
CVE-2011-3983
The CVE-2011-3983 entry describes a cross-site scripting (XSS) flaw in KENT-WEB WEB FORUM (versions 5.1 and earlier) where an attacker can inject arbitrary script or HTML via cookies (also noted via an email field in related advisories). The connected sources corroborate that the vulnerability af...
CVE-2011-3983
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies...
CVE-2011-3984
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
CVE-2011-3383
CVE-2011-3383 concerns a cross-site scripting (XSS) vulnerability in the KENT-WEB WEB FORUM product up to version 5.1 and earlier. The issue, described as an XSS allowing remote attackers to inject arbitrary web script or HTML via vectors related to “the web page to be output,” affects the web fo...
CVE-2011-3984
CVE-2011-3984 is an XSS vulnerability in KENT-WEB WEB FORUM (versions 5.1 and earlier) that can be triggered via web form entries to inject arbitrary script/HTML. Public details indicate remote injection possibilities, with related entries noting multiple XSS issues in the same product. Remediati...
CVE-2011-3984: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
CVE-2011-3383: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."...
CVE-2011-4172: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in KENT-WEB WEB FORUM before 5.1 allow remote attackers to inject arbitrary web script or HTML via 1 an e-mail address field or 2 a cookie, a related issue to CVE-2011-3383, CVE-2011-3983, and CVE-2011-3984...
CVE-2011-3983: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to cookies...
WEB FORUM vulnerable to cross-site scripting
Overview WEB FORUM provided by KENT-WEB contains a cross-site scripting vulnerability. WEB FORUM provided by KENT-WEB is a bulletin-board software. WEB FORUM contains a vulnerability in handling web form entries, which may result in cross-site scripting. ISHIBASHI,Tsuyoshi of Mitsui Bussan Secure...
WEB FORUM vulnerable to cross-site scripting
Overview WEB FORUM provided by KENT-WEB contains a cross-site scripting vulnerability. WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in handling cookies, which may result in cross-site scripting. ISHIBASHI,Tsuyoshi of Mitsui Bussan Secure...
WEB FORUM vulnerable to cross-site scripting
Overview WEB FORUM provided by KENT-WEB contains a cross-site scripting vulnerability. WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in processing the web page to be output, which may result in cross-site scripting. ISHIBASHI,Tsuyoshi of Mitsui...
JVN#36684331: WEB FORUM vulnerable to cross-site scripting
WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in processing the web page to be output, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the lates...
JVN#80971236: WEB FORUM vulnerable to cross-site scripting
WEB FORUM provided by KENT-WEB is a bulletin-board software. WEB FORUM contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version...
JVN#89764731: WEB FORUM vulnerable to cross-site scripting
WEB FORUM provided by KENT-WEB is a bulletin board software. WEB FORUM contains a vulnerability in handling cookies, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according ...
Woltlab Burning Board 2.3.6 addon SQL injection vulnerability-vulnerability warning-the black bar safety net
Woltlab Burning Board is a PHP, MySQL backend support of the WEB forum program. Woltlab Burning Board 2.3.6 in the hilfsmittel. php plug-ins existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injectio...
The moving web 8. 1 latest injection 0Day vulnerability analysis-vulnerability warning-the black bar safety net
Affected versions: dynamic network 8. 1 Official website: http://www.dvbbs.net Vulnerability type: SQL injection Vulnerability description: Today I bring to you is the latest action web forum of a serious vulnerability-the point of the ticket purchase page injection vulnerability. This...
动 网 PHP 论坛 indivgroup_dispbbs.php sql injection vulnerability-vulnerability warning-the black bar safety net
Dynamic network DVBBS Forum system is a PHP and MYSQL data architecture, high-performance web forum solutions. In the file indivgroupdispbbs. php: if$groupboardid == 0 //8th line 6 ...... else //the 9 2 row $query=$db-query"select id boardid,rootid,boardname...