CVE-2006-2050

SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...

AZ Bulletin Board 1.0.x/1.1 Post.PHP HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16351/info AZbb is prone to HTML-injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to steal cookie information, execute arbitrary clie...

CGI Generic Path Traversal (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local files inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

CGI Generic Path Traversal (extended test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

CGI Generic Path Traversal (write test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to modify arbitrary files on the web server or execute commands. Due to the w...

CVE-2006-2680

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

CVE-2006-2680

CVE-2006-2680 affects the AZ Photo Album Script Pro. The vulnerability is a cross-site scripting (XSS) flaw in the index.php file that allows remote attackers to inject arbitrary web script or HTML via the bad parameter name gazpart. The provided data indicates no explicit exploit code or in-the-...

CVE-2006-2680

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

CVE-2006-2680: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

CVE-2006-2050: Undefined Security Weakness

SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...

CVE-2006-2049: Undefined Security Weakness

Cross-site scripting XSS vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter...

kapda-22.txt

KAPDA::22 - Azbb v1.1.00 Cross Site Scripting KAPDA New advisory Vulnerable products : Azbb alert'XSS'"" NASL : -------------------- azbb1100XSS.nasl This script was written by Pedram Hayati pi3ch at kapda dot...

Cross site scripting

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

CVE-2006-0407

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

CVE-2006-0407

CVE-2006-0407 affects AZ Bulletin Board (AZbb) 1.1.00 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in post.php, exploitable via the nickname parameter and an iframe tag in the topic parameter, enabling injection of arbitrary HTML/JavaScript by an attacker. The description n...

CVE-2006-0407

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

CVE-2006-0407: Undefined Security Weakness

Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...

[SA18565] AZ Bulletin Board Cross-Site Scripting Vulnerabilities

TITLE: AZ Bulletin Board Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18565 VERIFY ADVISORY: http://secunia.com/advisories/18565/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: AZ Bulletin Board AZbb 1.x http://secunia.com/product/4938/ DESCRIPTIO...

CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...