CVE-2010-1276

Multiple cross-site scripting XSS vulnerabilities in BBSXP 2008 SP2 allow remote attackers to inject arbitrary web script or HTML via the URI in a request to 1 AddPost.asp, 2 AddTopic.asp, 3 AdminDefault.asp, 4 Bank.asp, 5 Manage.asp, and 6 ShowPost.asp. NOTE: the provenance of this information i...

CVE-2005-1954: Undefined Security Weakness

singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to 1 admin.class.php, 2 any .tpl.php file in templates/admindefault/, or 3 any .tpl.php file in templates/default/, which reveal the path in an error message...