CVE-2006-2648

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

CVE-2006-2648

The CVE-2006-2648 entry pertains to a Cross-site scripting (XSS) vulnerability in perform_search.asp of ASPBB 0.52 and earlier. The underlying issue is that an attacker can supply a malicious value in the search parameter, enabling remote execution of arbitrary HTML or web script in the context o...

CVE-2006-2648

Cross-site scripting XSS vulnerability in performsearch.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter...

Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability

--Security Report-- Advisory: ASPBB = 0.52 performsearch.asp XSS vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 04:26 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPBB www.aspbb.org Version: 0.52 and...

ASPBB 0.5.2 - 'Perform_search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18146/info ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

ASPBB 0.5.2 - Perform_search.asp Cross-Site Scripting

ASPBB 0.5.2 - Performsearch.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18146/info ASPBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

aspbbXSS.txt

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="alert'Xss Vulnerability'; http://www.example.com/profila.asp?get="alert'Xss Vulnerability';&URL=%2FDefault%2Easp%3F TeufeL // Netkabus.Com Research And Develop Group...

CVE-2006-2497

Multiple cross-site scripting XSS vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to default.asp or 2 get parameter to profile.asp...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to default.asp or 2 get parameter to profile.asp...

CVE-2006-2497

Multiple cross-site scripting XSS vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 action parameter to default.asp or 2 get parameter to profile.asp...

CVE-2006-2497

CVE-2006-2497 affects AspBB 0.5.2 and describes two cross-site scripting (XSS) vulnerabilities : an XSS vector via the action parameter to default.asp and via the get parameter to profile.asp. The NVD summary lists a network-vector, with a base score of 5.8 (Medium) and partial confidentiality/in...

AspBB Forum "profile.asp & default.asp" XSS Vulnerability

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...

ASPBB 0.5.2 - default.asp?action Cross-Site Scripting

ASPBB 0.5.2 - default.asp?action Cross-Site Scripting source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

ASPBB 0.5.2 - 'profile.asp?get' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

ASPBB 0.5.2 - 'default.asp?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

ASPBB 0.5.2 - profile.asp?get Cross-Site Scripting

ASPBB 0.5.2 - profile.asp?get Cross-Site Scripting source: https://www.securityfocus.com/bid/18025/info ASPBB is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

CVE-2005-4259

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 TID parameter in topic.asp, 2 FORUMID parameter in forum.asp, and 3 PROFILEID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained...

CVE-2005-4259

CVE-2005-4259 affects ASPBB 0.4 and describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via (1) TID in topic.asp, (2) FORUM_ID in forum.asp, and (3) PROFILE_ID in profile.asp. The root cause is not explicitly detailed in the documents beyond the i...

CVE-2005-4259

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 TID parameter in topic.asp, 2 FORUMID parameter in forum.asp, and 3 PROFILEID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained...