CVE-2007-3212

CVE-2007-3212 documents multiple XSS vulnerabilities in Beehive Forum 0.7.1, specifically in links.php. The issue arises in the (1) viewmode, (2) fid, and (3) sort_dir parameters, representing vectors distinct from CVE-2005-4460. The vulnerability affects Beehive Forum’s links.php handling and pe...

CVE-2007-3212

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

Beehive Forum 0.7.1 - 'links.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary script code in the browser of an...

Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities

Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may levera...

MagNet BeeHive CMS (header) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- Beehive CMS header Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Ye...

MagNet BeeHive CMS (header) - Remote File Inclusion

--------------------------------------------------------------------------- Beehive CMS header Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes Critical Level : Dangerous...

MagNet BeeHive CMS (header) - Remote File Inclusion

MagNet BeeHive CMS header - Remote File Inclusion --------------------------------------------------------------------------- Beehive CMS header Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security...

MagNet BeeHive CMS (header) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= MagNet BeeHive CMS header Remote File Include Vulnerability =============================================================...

[KAPDA::#17] - beehiveforum Script Injection

KAPDA New advisory Vendor: http://www.beehiveforum.net Vulnerable: Version 0.6.2 Bug: HTML Injection , Possible attacks with registerglobals = On Exploitation: Remote with browser Description: -------------------- Beehive Forum is a PHP-based message board system that uses a MySQL database...

Beehive Forum 0.6.2 - index.php SQL Injection

Beehive Forum 0.6.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/16521/info Beehive Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to...

Beehive Forum 0.6.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16521/info Beehive Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain administrative...

CVE-2005-4461

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the usersess parameter...

CVE-2005-4460

Cross-site scripting XSS vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Description, and 3 Comment fields to a links.php and b linksadd.php...

CVE-2005-4461

SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the usersess parameter...

CVE-2005-4460

Beehive Forum before or at version 0.6.2 is affected by a cross-site scripting (XSS) vulnerability in links.php and links_add.php. The issue allows remote attackers to inject arbitrary web script or HTML via the Name, Description, and Comment fields. The CVE-2005-4460 description in the provided ...

CVE-2005-4460

Cross-site scripting XSS vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Description, and 3 Comment fields to a links.php and b linksadd.php...

CVE-2005-4461

The CVE-2005-4461 entry concerns Beehive Forum (version 0.6.2 and earlier) with a SQL injection in index.php triggered by the user_sess parameter. The underlying issue allows an attacker to remotely execute arbitrary SQL commands, affecting the database via the vulnerable script. The available re...

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities

Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/16002/info Beehive Forum is prone to multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

CVE-2005-2421

Technical details about CVE-2005-2421 are not publicly available in the provided connected documents. Monitor for updates to identify affected products, root cause, impact, and fixes.

CVE-2005-2423

Beehive Forum allows remote attackers to obtain sensitive information via 1 an invalid finaluri or sortby parameter to index.php or a direct request to 2 admin.php, 3 attachments.inc.php, 4 banned.inc.php, 5 beehive.inc.php, 6 constants.inc.php, 7 db.inc.php, 8 dictionary.inc.php or 9...