CVE-2005-4333

CVE-2005-4333 affects Binary Board System (BBS) 0.2.5 and earlier. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML through parameters to reply.pl (1) inreplyto, (2) article, (3) board; and to (b) stats.pl, and to ...

CVE-2005-4306

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-4306

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-4306

CVE-2005-4306 describes multiple XSS vulnerabilities in SiteNet BBS 2.0 and earlier. The issues arise in the handling of user-supplied input to netboardr.cgi via the parameters (pg, tid, cid, fid) and to search.cgi via the cid parameter, allowing remote attackers to inject arbitrary web script or...

SiteNet BBS XSS vuln

SiteNet BBS XSS vuln Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/sitenet-bbs-xss-vuln.html vendor:www.focalmedia.net/sitenetbbs.html affected version:2.0 and prior Product Description: Fast, customizable, moderation, upload of user images, use...

Sitenet BBS 2.0 - netboardr.cgi Multiple Cross-Site Scripting Vulnerabilities

Sitenet BBS 2.0 - netboardr.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15883/info SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker...

Sitenet BBS 2.0 - search.cgi?cid Cross-Site Scripting

Sitenet BBS 2.0 - search.cgi?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/15883/info SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...

Sitenet BBS 2.0 - 'netboardr.cgi' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15883/info SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

Sitenet BBS 2.0 - 'search.cgi?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15883/info SiteNet BBS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser ...

Zeroboard flaws (2)

The remote web server contains several PHP scripts that are prone to arbitrary PHP code execution and file disclosure attacks. Description : The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this CGI is vulnerable to multiple flaws which may allow an...

Using the Webshell to get a individual who can't see the BBS administrators-vulnerability warning-the black bar safety net

Author: Snakehu & Senarie source: evil octal The article has been published in 2 0 0 5-1 0 issue of hacker line of Defense of Objectives: by the Webshell for the original file to modify to make yourself into an administrator, a conventional case will not be the administrator found. Purpose: easy...

Want to learn real hacking techniques? Come in and see-vulnerability warning-the black bar safety net

SkyPerson Although I am a Diamondback bird! But still to advise to want to learn network technology people 1, Do not research QQ, after all, QQ is not the technology, stolen a few number? The program is not write yourself, there is nothing to be proud of. 2, Do not study how to crack the cafe,...

PBLang BBS <= 4.65 Multiple Vulnerabilities

According to its banner, the remote host is running a version of PBLang BBS, a bulletin board system written in PHP, that suffers from the following vulnerabilities: - HTML Injection Vulnerability in pmpshow.php. An attacker can inject arbitrary HTML and script into the body of PMs sent to users...

STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities

STG Security Advisory: SSA-20050113-25 ZeroBoard multiple vulnerabilities Revision 1.1 Date Published: 2004-12-31 KST Last Update: 2005-1-13 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications in Korea. However, an input validation...

BBS E-Market Professional index.php filename Parameter Traversal Arbitrary File Access

The remote host is running BBS E-Market Professional, a Korean e-commerce application written in PHP.\n There is a directory traversal vulnerability in the 'filename' parameter of '/bemarket/shop/index.php'. A remote attacker could exploit this to read sensitive information on the system...

bbsEMarket.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...

[Full-Disclosure] STG Security Advisory: [SSA-20040915-07] BBS E-Market Professional multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...

Multiple vulnerabilities 1n BBS E-Market Professional

ECHOADV06$2004 --------------------------------------------------------------------------- Multiple vulnerabilities 1n BBS E-Market Professional --------------------------------------------------------------------------- Author: y3dips Date: Sept, 7th 2004 Location: Indonesian, Jakarta Web:...

BBS E-Market Professional bf_130 (1.3.0) - Remote File Inclusion

BBS E-Market Professional bf130 1.3.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/11146/info BBS E-Market Professional is reported to be affected by a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be...

BBS E-Market Professional bf_130 (1.3.0) - Remote File Inclusion

source: https://www.securityfocus.com/bid/11146/info BBS E-Market Professional is reported to be affected by a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system...