521 matches found
vBulletin自定义BBCode标签脚本注入漏洞
vBulletin是一款开放源代码的PHP论坛程序。 vBulletin在创建使用自定义标签的内容时没有正确地解析BBCode，这允许攻击者注入任意HTML和脚本代码，当查看恶意数据时就会在用户浏览器会话中执行所注入的代码。 VBulletin 4.0.3 VBulletin 3.8.4 PL2 厂商补丁： VBulletin --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.vbulletin.com/ BadTagx:x' onerror=alert0 foo='/BadTag...
vBulletin - Insecure Custom BBCode Tags
vBulletin - Insecure Custom BBCode Tags Versions Affected: 3.8.4 PL2 Most likely all versions Info: Content publishing, search, security, and more—vBulletin has it all. Whether it’s available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes...
CVE-2009-4651
Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 color, 2 img, or 3 url BBCode tags in unspecified vectors...
DasForum Local File Inclusion
'/ -.- --------------------oOO------OOo------------------- | DasForum layout Local File Inclusion Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r ! Download: http://mirror.vocabbuilder.net/savannah/dasforum/ ! Date:...
CVE-2009-4408
CVE-2009-4408 affects PyForum 1.0.3 (and possibly earlier versions) and possibly zForum, via the models.parser component. The root cause is improper handling of crafted BBCode (img and url tags) in posts, allowing remote XSS when a post is viewed. Publicly available references confirm multiple XS...
CVE-2009-4408
Multiple cross-site scripting XSS vulnerabilities in models.parser in PyForum 1.0.3 and possibly earlier versions, and possibly zForum, allow remote attackers to inject arbitrary web script or HTML via crafted BBcode 1 img or 2 url tags, which are not properly handled when a post is viewed...
eoCMS 0.9.03 Remote File Inclusion
eoCMS '; $BBCODEoverride = getStandard'./js/bbcodepress/'; // $BBCODEoverride = getStandard'./js/bbcodepress/','-eocms'; Example : path/js/bbcodepress/bbcode-form.php?BBCODEpath=Shell 9r33tZ T0 : 4ll 1nd0n3s14n r34l h4ck3r ... fuck : x-ace m0th3r fuck3r 1nd0n3s14n r34l sn1ch tomahawk b19 l4m3rs...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
Exploit for unknown platform in category web applications ================================================= eoCMS = 0.9.03 Remote FIle Include Vulnerability ================================================= Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author:...
eoCMS 0.9.03 - Remote File Inclusion
eoCMS 0.9.03 - Remote File Inclusion Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
No description provided by source. Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...
eoCMS 0.9.03 - Remote File Inclusion
Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include Vulnerability Created By 1nd0n3s14n l4m3r c...
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...
CVE-2009-4041
UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...
CVE-2009-4041
CVE-2009-4041 affects UseBB 1.0.9 before 1.0.10. A crafted BBCode tag causes the BBCode parser to loop infinitely, enabling a remote attacker to trigger a denial of service. The available connected documents confirm the DoS condition but do not provide a patched version or definitive remediation ...
CVE-2009-4041
UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service infinite loop via crafted BBCode tags...
CVE-2009-3803
Multiple cross-site scripting XSS vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the statusmessage parameter to 1 /news, 2 /comment, 3 /forum, 4 /blog, and 5 /tags; the statusmessage parameter to 6 forum.php, 7 discussion.php, 8...
CVE-2009-3803
Multiple cross-site scripting XSS vulnerabilities in Amiro.CMS 5.4.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the statusmessage parameter to 1 /news, 2 /comment, 3 /forum, 4 /blog, and 5 /tags; the statusmessage parameter to 6 forum.php, 7 discussion.php, 8...
Cross site scripting
Cross-site scripting XSS vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL BBcode tag in a private message...
CVE-2008-6885
Cross-site scripting XSS vulnerability in pmlite.php in XOOPS 2.3.1 and 2.3.2a allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute in a URL BBcode tag in a private message...