Simple Message Board 2.0 beta1 - Thread.cfm Cross-Site Scripting

Simple Message Board 2.0 beta1 - Thread.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14268/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...

Simple Message Board 2.0 beta1 - Forum.cfm Cross-Site Scripting

Simple Message Board 2.0 beta1 - Forum.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14266/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...

Simple Message Board 2.0 beta1 - 'Forum.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14266/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Simple Message Board 2.0 beta1 - 'User.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14267/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Simple Message Board 2.0 beta1 - 'Search.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14269/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Simple Message Board 2.0 beta1 - Search.cfm Cross-Site Scripting

Simple Message Board 2.0 beta1 - Search.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14269/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may...

Simple Message Board 2.0 beta1 - User.cfm Cross-Site Scripting

Simple Message Board 2.0 beta1 - User.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/14267/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may levera...

Simple Message Board 2.0 beta1 - 'Thread.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14268/info A cross-site scripting vulnerability affects Simple Message Board. This issue is due to a failure of the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

FreeBSD : phpbb -- arbitrary command execution and other vulnerabilities (e3cf89f0-53da-11d9-92b7-ceadd4ac2edd)

The ChangeLog for phpBB 2.0.11 states : Changes since 2.0.10 - Fixed vulnerability in highlighting code very high severity, please update your installation as soon as possible - Fixed unsetting global vars - Matt Kavanagh - Fixed XSS vulnerability in username handling - AnthraX101 - Fixed not...

idboard113SQL.txt

============================================================ Title: ID Board 1.1.3 SQL Injection Vulnerability Vulnerability Discovery: me, myself and I Date: 09/07/2005 Severity: Remote users can fetch MD5 Passwd Hash. Affected version: 1.1.3 free only one tested Vendor: http://www.id-team.com/...

CVE-2005-2197

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php...

CVE-2005-2197

The CVE-2005-2197 entry refers to a SQL injection vulnerability in sql.cls.php of Id Board 1.1.3, exploitable remotely by manipulating the f parameter to index.php. The underlying issue is improper handling of SQL queries, allowing attackers to modify query logic. According to the NVD entry, the ...

CVE-2005-2197

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries, as demonstrated using the f parameter to index.php...

ID Team ID Board 1.1.3 - 'SQL.CLS.php' SQL Injection

source: https://www.securityfocus.com/bid/14204/info ID Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

[EXPL] phpBB Remote PHP Code Execution (viewtopic.php 2)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-1845

CVE-2002-1845 is an XSS vulnerability in Yet Another Bulletin Board (YaBB) versions 1.40 and 1.41, where the password parameter (passwrd) can be exploited by remote attackers to inject arbitrary web script/HTML via index.php. The connected sources confirm the affected product/version and the vuln...

CVE-2002-1821

Affected software: Ultimate PHP Board (UPB) 1.0 and 1.0b. Vulnerability: Remote authenticated users can gain privileges and perform unauthorized actions by making direct requests to specific admin pages: admin_members.php, admin_config.php, admin_cat.php, and admin_forum.php. Root cause/impact: T...

CVE-2002-1820

register.php in Ultimate PHP Board UPB 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account name of admin with a lower case "a."...

CVE-2002-1846

YaBB vulnerable: YaBB 1.40/1.41 allows changing a user’s password without providing the correct password, by leveraging a stolen cookie and submitting a profile2 action to index.php. This lets remote attackers modify the password and adjust the expiretime setting. Root cause is insufficient authe...

CVE-2002-1821

Ultimate PHP Board UPB 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to 1 adminmembers.php, 2 adminconfig.php, 3 admincat.php, or 4 adminforum.php...