178 matches found
XMB Forum 1.9.3 Post.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
XMB Forum 1.6 pre-beta Image Tag Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a...
XMB Forum 1.8 Member.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7662/info XMB Forum has been reported prone to a cross-site scripting vulnerability. XMB Forum fails to adequately filter script code from URL parameters, making it prone to cross-site scripting attacks. Attacker-supplied...
XMB Forum 1.8 Member.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum. This is...
XMB Forum 1.8 BBcode align Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
XMB Forum 1.8 u2uadmin.php uid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
XMB Forum 1.8 forumdisplay.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
XMB Forum 1.6 Magic Lantern Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submittin...
XMB <= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XMB = 1.9.6 'u2uid' SQL injection / admin credentials disclosure\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by XMB\n\n; / works with magicquotes=off Mysql = 4....
XMB 1.9.3 U2U.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...
XMB Forum 1.8 editprofile.php user Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
XMB Forum 1.8/1.9 u2u.php username Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful...
XMB <= 1.9.6 Final basename() Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by XMB\n\n; / works...
XMB 1.9.11 Cross Site Request Forgery
...
Cross site scripting
Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...
CVE-2007-6728
Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...
CVE-2007-6728
Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...
CVE-2007-6728
CVE-2007-6728 – confirmed XSS in XMB 1.5. The vulnerability affects the MSN field during user registration, allowing an attacker to inject arbitrary web script or HTML. The issue is a cross-site scripting flaw in XMB 1.5 as described in the CVE entry and cross-referenced records. The available da...
CVE-2007-0519
The CVE-2007-0519 entry describes a Cross-site scripting (XSS) vulnerability in memcp.php of XMB U2U Instant Messenger, allowing remote authenticated users to inject arbitrary web script or HTML via the recipient field. The consolidated sources confirm the affected component (memcp.php) and the e...
