CVE-2006-3211

The CVE-2006-3211 issue affects cjGuestbook versions 1.3 and earlier, located in sign.php. It is a cross-site scripting (XSS) vulnerability that lets remote attackers inject JavaScript by using a javascript: URI in an img BBCode tag within the comments parameter. Impact is partial integrity compr...

CVE-2006-3211

Cross-site scripting XSS vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter...

PT-2006-4106 · Unknown · Cjguestbook

Name of the Vulnerable Software and Affected Versions: cjGuestbook versions 1.3 and earlier Description: The issue concerns a cross-site scripting XSS vulnerability. It allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments parameter...

cjGuestbook v1.3 - XSS

cjGuestbook v1.3 Homepage: http://cmj-php.opanelhosting.com Affected files: posting in the guestbook XSS vuln with cookie disclosure: cjGuestbook uses bbcode, and since theres a vulnerability in early editions of bbcode we can achieve our XSS example. For a PoC put in as your comment:...

Cross site scripting

Cross-site scripting XSS vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag...

CVE-2006-2269

Cross-site scripting XSS vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag...

myBloggie <= 2.1.3 XSS

myBloggie = 2.1.3 XSS Discovered by: Nomenumbra Date: 6/4/2006 impact:moderate privilege escalation,possible defacement MyBloggie versions 2.1.3 and below are vulnerable to XSS injection in the image BBcode as follows: imgjavascript:alert'xss'/img Nomenumbra/0x4F4C...

tyrocmsXSS.txt

TyroCms beta V1.0 multiple XSS injections Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement TyroCMS is a PHP & MySql powered content management systemcms. Inludes built-in forums, powerful admin control panel, secure user system, and much more. Easi...

CVE-2006-2228

Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 a javascript URI in an img BBCode tag, or a JavaScript event in a 2 url BBCode tag or 3 color BBCode tag...

CVE-2006-2228

Cross-site scripting XSS vulnerability in w-Agora aka Web-Agora 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the '=' equals character, which bypasses a restrictive regular...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

Cmscout <= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...

TyroCms beta V1.0 multiple XSS injections

TyroCms beta V1.0 multiple XSS injections Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement TyroCMS is a PHP & MySql powered content management systemcms. Inludes built-in forums, powerful admin control panel, secure user system, and much more. Easi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...

CVE-2006-2143

Multiple cross-site scripting XSS vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the 1 color, 2 size, or 3 url bbcode tags...

CVE-2006-2143

CVE-2006-2143 describes multiple XSS vulnerabilities in TextFileBB 1.0.16. The issue allows remote attackers to inject arbitrary JavaScript/HTML via onmouseover-based events in the (1) color, (2) size, or (3) url bbcode tags. Affected software: TextFileBB 1.0.16. Root cause: lack of proper input ...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag. NOTE: the email vector is already covered by CVE-2006-1625, although it might stem from the...