549 matches found
Simple Machines Forums (BBCode) Cookie Stealing Vulnerability
No description provided by source. Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...
Simple Machines Forums (BBCode) Cookie Stealing Vulnerability
Exploit for unknown platform in category web applications ============================================================= Simple Machines Forums BBCode Cookie Stealing Vulnerability ============================================================= Author: Xianur0 BBCode of the smf not filtered properly...
SMF Cookie Stealing
Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...
Simple Machines Forum (SMF) - 'BBCode' Cookie Stealing
Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...
[DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x
Digital Security Research Group DSecRG Advisory DSECRG-08-041 Application: XOOPS Versions Affected: 2.3.1, 2.3.2a Vendor URL: http://www.xoops.org/ Bug: Stored XSS Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors: Digital...
XOOPS 2.3.1/2.3.2a Cross Site Scripting
Digital Security Research Group DSecRG Advisory DSECRG-08-041 Application: XOOPS Versions Affected: 2.3.1, 2.3.2a Vendor URL: http://www.xoops.org/ Bug: Stored XSS Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors: Digital...
CVE-2008-5090
Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the pregreplace function with the eval switch...
Simple Machines Forum < 1.1.7 Incomplete BBcode Block Security Bypass
Binary data 4703.prm...
CVE-2008-4871
Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...
Cross site scripting
Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...
CVE-2008-4871
Cross-site scripting XSS vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags...
CVE-2008-4871
CVE-2008-4871 is an XSS vulnerability affecting My Little Forum 1.75 and 2.0 Beta 23, exploitable via BBCode IMG tags to inject arbitrary script/HTML. Affected component is the forum software’s input parsing for BBCode IMG usage; underlying root cause details are not provided in the connected doc...
CVE-2008-4513
Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...
Cross site scripting
Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...
CVE-2008-4513
CVE-2008-4513 describes a cross-site scripting (XSS) vulnerability in the BBcode API module of Phorum 5.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags. This is documented in multiple sources (NVD entry and related CVE records). The provi...
CVE-2008-4513
Cross-site scripting XSS vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags...
Simple Machines Forum 1.1.6 Filter Post Bypass Vulnerability
No description provided by source. Name: SMF 1.1.6 Filter Post Bypass Author: WHK WebSite: http://www.jccharry.com/ en The data in a post are not filtered properly when someone enters statements BBCode wrong without content that a user can enter words banned by the system of restrictions by...
Advanced Electron Forum <= 1.0.6 Remote Code Execution Vulnerability
No description provided by source. GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system...
Advanced Electron Forum <= 1.0.6 Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Advanced Electron Forum = 1.0.6 Remote Code Execution Vulnerability ==================================================================== GulfTech Security Research...
Invision Power Board BBCode处理HTML注入漏洞
BUGTRAQ ID: 27920 Invision Power Board是一个非常流行的PHP论坛程序。 IPB处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞攻击其他Web用户。 IPB没有正确地过滤通过自定义BBCode所传送的输入，如果用户向论坛提交了恶意请求的话，就可能导致注入任意HTML和脚本代码，当用户浏览张贴时就会在浏览器会话中执行这些代码。 Invision PS IPB 2.3.4 厂商补丁： Invision PS ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...