XMB Forum 1.8 - 'buddy.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these vulnerabilities to execute arbitrary...

XMB Forum 1.8 - member.php Cross-Site Scripting

XMB Forum 1.8 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks...

XMB Forum 1.8 - 'member.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks. Attacker-supplied script code may be included in a...

XMB 1.8 Partagium cross site scripting vulnerability

Hi! Lotek, a friend of mine, informed me about a cross site scripting bug1 in my XMBforum 1.8.x2: http://www.website.org/xmbforum/member.php?action=viewpro&member=3Cdiv3E3Cfont20color=22red223EMarc3C/font3E3Cscript3Ealert22Ruef22;3C/script3E3C/div3E I sent this information at Apr 25 2003 to...

XMB member.php Multiple Parameter SQL Injection

The remote host is running XMB Forum, a web forum written in PHP. According to its banner, this forum is vulnerable to a SQL injection bug which may allow an attacker to steal the passwords hashes of any user of this forum, including the forum administrator. Once he has the password hashes, he ca...

XMB 1.8 Partagium SQL Injection Bug

Binary Bugs Advisory BB-2003-1 XMB SQL injection - Product: XMB 1.8 Partagium Final Vendor: http://www.xmbforum.com Versions affected: 1.8, possibly others Impact: SQL injection vulnerability Risk: Medium/High Vendor status: Notified/New version available Release date: April 22, 2003 I. Overview...

XMB Forum 1.8 - 'member.php' SQL Injection

// source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum. This is reportedly due to insufficient...

XMB Forum 1.8 - member.php SQL Injection

XMB Forum 1.8 - member.php SQL Injection // source: https://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum...

XMB < 1.9.1 Multiple XSS

The remote host is running XMB Forum, a web forum written in PHP. The version of XMB installed on the remote host is affected by several cross-site scripting issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Security holes : XMB Magic Lantern forum &amp; DevBB

Hi all : Product 1 : XMB Magic Lantern forum 1.6b final http://www.xmbforum.com http://www.aventure-media.co.uk Problems : - Reading of logs files - XSS - Path Disclosure - Access to users/admins accounts - Logs distortion Exploits : - /indexlog.log - /cplogfile.log - If indexlog not chmod 777 =...

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting source: https://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves...

XMB Forum 1.6 - Magic Lantern Cross-Site Scripting

source: https://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submitting script to the variable 'member' ...

XMB Forum 1.6 - Magic Lantern Log File

XMB Forum 1.6 - Magic Lantern Log File source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable...

XMB Forum 1.6 - Magic Lantern Log File

source: https://www.securityfocus.com/bid/4722/info XMB Forum 1.6 Magic Lantern allows remote users to conduct activities in the forum while bypassing normal logging functions. This is accomplished by submitting an arbitrary string as the "analized" variable to index.php. Log information is writt...

XMB cross-scripting vulnerability

XMB is a php-based forum. This product contain a Cross Site Scripting vulnerability that allows attackers to insert JavaScript code and other HTML code into existing messages, bypassing the internal JavaScript/HTML code stripper. Exploit: imgjavasCript:alert'Hello world.'/img Vulnerable systems:...

XMB Forum 1.6 pre-beta - Image Tag Script Injection

XMB Forum 1.6 pre-beta - Image Tag Script Injection source: https://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and...

XMB Forum 1.6 pre-beta - Image Tag Script Injection

source: https://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a forum message. This has been fixed i...