XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting

source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...

CVE-2003-0483

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...

CVE-2003-0483

The CVE-2003-0483 entry concerns XMB Forum 1.8 Partagium, where the member.php and buddy.php scripts are vulnerable to cross-site scripting (XSS). The underlying issue is that user-controlled inputs to the member parameter and the action parameter can be used to inject arbitrary script, enabling ...

CVE-2003-0483

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...

XMB Forum 1.8 - buddy.php?action Cross-Site Scripting

XMB Forum 1.8 - buddy.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any...

XMB Forum 1.8 - 'member.php?member' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary...

Many XSS Vulnerabilities in XMB Forum.

Many XSS Vulnerabilities in XMB Forum. Program Name : XMB Forum AffectedVersion : 1.8 Partagium may be the newest version Home Page : http://www.xmbforum.com Author : Knight Commander at hackervn.net +Vul: In this link: http://pathto/XMBforum/member.php?action=viewpro&member=adminscriptalert...

XMB Forum 1.8 - 'buddy.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary...

XMB Forum 1.8 - member.php Cross-Site Scripting

XMB Forum 1.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks...

XMB Forum 1.8 - 'member.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks. Attacker-supplied script code may be included in a...

XMB 1.8 Partagium cross site scripting vulnerability

Hi! Lotek, a friend of mine, informed me about a cross site scripting bug1 in my XMBforum 1.8.x2: http://www.website.org/xmbforum/member.php?action=viewpro&member=3Cdiv3E3Cfont20color=22red223EMarc3C/font3E3Cscript3Ealert22Ruef22;3C/script3E3C/div3E I sent this information at Apr 25 2003 to...

XMB member.php Multiple Parameter SQL Injection

The remote host is running XMB Forum, a web forum written in PHP. According to its banner, this forum is vulnerable to a SQL injection bug which may allow an attacker to steal the passwords hashes of any user of this forum, including the forum administrator. Once he has the password hashes, he ca...

XMB Forum 1.8 - 'member.php' SQL Injection

// source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum. This is reportedly due to insufficient...

XMB Forum 1.8 - member.php SQL Injection

XMB Forum 1.8 - member.php SQL Injection // source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting source: https://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves...

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting

source: https://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submitting script to the variable 'member' ...

XMB Forum 1.6 - Magic Lantern Log File

XMB Forum 1.6 - Magic Lantern Log File source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable...

XMB Forum 1.6 - Magic Lantern Log File

source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable to index.php. Log information is writt...