Unfixed XSS vulnerability at doonsan.or.kr

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting doonsan.or.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently unfixe...

Unfixed XSS vulnerability at www.j1dm.co.kr

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.j1dm.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

Unfixed XSS vulnerability at www.shinerent.co.kr

Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.shinerent.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...

CVE-2006-6348: Undefined Security Weakness

Cross-site scripting XSS vulnerability in board.php in mowdBB RC-6 allows remote attackers to inject arbitrary web script or HTML via the forumname parameter...

CVE-2006-3485: Undefined Security Weakness

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php...

CVE-2006-3078: Undefined Security Weakness

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID parameter in board.php and 2 viewcatmod parameter in main.php...

CVE-2006-2088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2005-2566: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter to board.php or 2 UID parameter to member.php...

SQL IN Open Bulletin Board

Class: Input Validation Error Remote: Yes Local: Yes Credit: ABDUCTER ---- [email protected] OR [email protected] Vulnerable: Powered by Open Bulletin Board ALL VERSION info :- openbb is APOPULAR FORUM HAVE MANY VERSION U CAN FIND SOURCE OF FORUM IN http://www.openbb.com/ discussi...

CVE-2004-1779: Undefined Security Weakness

Cross-site scripting XSS vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter...

CVE-2003-1184: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via 1 time in board.php, 2 the profile Homepage-Feld, 3 pictures, and 4 other "Diverse XSS Bugs."...

CVE-2004-1966: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter in board.php, 2 sortorder, perpage, or id parameters in member.php, 3 forums parameter in search.php, or 4 PID or FID parameters ...

OpenBB board.php FID Parameter XSS

The remote host seems to be running OpenBB, a forum management system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through the script 'board.php'. Using a specially crafted URL, an attacker can cause arbitrary code execution for third-party...

CVE-2002-1505: Undefined Security Weakness

SQL injection vulnerability in board.php for WoltLab Burning Board wBB 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter...

OpenBB 1.0 - 'board.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9303/info OpenBB is prone to a cross-site scripting vulnerability in the 'board.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI parameters. This input will be included in...

OpenBB 1.0 - board.php Cross-Site Scripting

OpenBB 1.0 - board.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9303/info OpenBB is prone to a cross-site scripting vulnerability in the 'board.php' script. The source of the problem is that HTML and script code are not adequately sanitized from input supplied via URI...

OpenBB 1.01.1 - board.php SQL Injection

OpenBB 1.01.1 - board.php SQL Injection source: https://www.securityfocus.com/bid/7404/info It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...

OpenBB 1.0/1.1 - 'board.php' SQL Injection

source: https://www.securityfocus.com/bid/7404/info It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The consequenc...

CVE-2002-1429

The CVE-2002-1429 entry corresponds to a cross-site scripting (XSS) vulnerability in endity.com’s ShoutBOX, specifically in the board.php handler. The flaw allows remote attackers to inject arbitrary HTML into the shoutbox page by manipulating the site parameter. Documents confirm the affected co...

CVE-2002-1429: Undefined Security Weakness

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...