177 matches found
CVE-2004-0322
Affected software: XMB 1.8 Final SP2. Vulnerability type: multiple cross-site scripting (XSS). Root cause / vectors: manipulation of input parameters and HTML attributes that allow script execution, including (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user paramete...
CVE-2004-0323
CVE-2004-0323 affects XMB (XMBForum) 1.8 Final SP2 (and item 3 also observed in XMB 1.9 beta). The vulnerabilities are multiple SQL injection flaws exploitable via parameters in web scripts: ppp (viewthread.php), desc (misc.php), tpp (forumdisplay.php), ascdesc (forumdisplay.php), and addon (stat...
CVE-2004-0322
Multiple cross-site scripting XSS vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the 1 member parameter in member.php, 2 uid parameter in u2uadmin.php, 3 user parameter in editprofile.php, 4 an onmouseover event in an align tag when bbco...
waraxe-2004-SA004.txt
================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...
[waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2
================================================================================ waraxe-2004-SA004 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium Final SP2...
CVE-2004-0322
Multiple cross-site scripting XSS vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the 1 member parameter in member.php, 2 uid parameter in u2uadmin.php, 3 user parameter in editprofile.php, 4 an onmouseover event in an align tag when bbco...
XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting
XMB Forum 1.8 - editprofile.php?user Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of...
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...
XMB Forum 1.8 - 'editprofile.php?user' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...
XMB Forum 1.8 - 'u2uadmin.php?uid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...
XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting
XMB Forum 1.8 - u2uadmin.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote...
XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections
XMB Forum 1.8 - forumdisplay.php Multiple SQL Injections source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remo...
XMB Forum 1.8 - BBcode align Tag Cross-Site Scripting
source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...
XMB Forum 1.8 - 'forumdisplay.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. An attacker may exploit any one of...
CVE-2003-0483
Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...
CVE-2003-0483
The CVE-2003-0483 entry concerns XMB Forum 1.8 Partagium, where the member.php and buddy.php scripts are vulnerable to cross-site scripting (XSS). The underlying issue is that user-controlled inputs to the member parameter and the action parameter can be used to inject arbitrary script, enabling ...
CVE-2003-0483
Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...
XMB Forum 1.8 - buddy.php?action Cross-Site Scripting
XMB Forum 1.8 - buddy.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any...
XMB Forum 1.8 - 'member.php?member' Cross-Site Scripting
source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary...
Many XSS Vulnerabilities in XMB Forum.
Many XSS Vulnerabilities in XMB Forum. Program Name : XMB Forum AffectedVersion : 1.8 Partagium may be the newest version Home Page : http://www.xmbforum.com Author : Knight Commander at hackervn.net +Vul: In this link: http://pathto/XMBforum/member.php?action=viewpro&member=adminscriptalert...