5412 matches found
CVE-2005-1550
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter...
CVE-2005-1549
The OpenVAS entries confirm a concrete vulnerability in Easy Message Board (Easy Message Board, Perl-based). The flaw resides in easymsgb.pl where input validation is inadequate, enabling directory traversal via the print parameter and potentially allowing remote command execution on the web serv...
CVE-2005-1549
Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. dot dot in the print parameter...
OpenBB SQL Injection & Cross-site Scripting Vulnerability
Open Bulletin Board www.openbb.com Vulnerable versions: 1.0.8 OpenBB read.php SQL Injection Vulnerability Proof of concept: http://www.example.com/openbb/read.php?action=lastpost&TID=' http://www.example.com/openbb/read.php?TID=' OpenBB member.php Cross-Site Scripting Vulnerability Proof of...
Ultimate PHP Board < 1.9.7 viewforum.php Multiple Vulnerabilities
The remote host is running Ultimate PHP Board UPB. The remote version of this software is vulnerable to cross-site scripting attacks, and SQL injection flaws. Using a specially crafted URL, an attacker may execute arbitrary commands against the remote SQL database or use the remote server to set ...
Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting
Ultimate PHP Board 1.81.9 - viewforum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...
Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection
Ultimate PHP Board 1.81.9 - viewforum.php SQL Injection source: https://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
Ultimate PHP Board 1.8/1.9 - 'viewforum.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13621/info Ultimate PHP Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...
Ultimate PHP Board (UPB) Security Advisory
Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl - Woopie Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB ...
Woltlab Burning Board pms.php folderid Parameter XSS
The version of Burning Board or Burning Board Lite installed on the remote host may be prone to cross-site scripting attacks due to its failure to properly sanitize input passed to the 'folderid' parameter of the 'pms.php' script. An attacker may be able to exploit this flaw to cause arbitrary HT...
phpBB contains an input validation vulnerability in "includes/bbcode.php"
Overview phpBB fails to sanitize user input, allowing the possible inclusion of active script content in user posts. Description phpBB is a widely used Open Source bulletin board package written in PHP.An input validation issue has been identified that allows a malicious phpBB user to include...
Woltlab Burning Board Detection
The remote host is running Burning Board or Burning Board Lite, message forum software packages that use PHP and MySQL. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18250; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"...
CVE-2004-1967
Cross-site request forgery CSRF vulnerabilities in 1 cpforums.php, 2 cpusergroup.php, 3 cpipbans.php, 4 myhome.php, 5 post.php, or 6 moderator.php in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link...
CVE-2004-1968
Open Bulletin Board (OpenBB) before version 1.0.6 contains a vulnerability in the readmsg action of myhome.php that allows remote attackers to read arbitrary messages by modifying the id parameter. The affected component is the readmsg functionality; underlying cause is improper validation of the...
CVE-2004-1965
OpenBB/Open Bulletin Board (v1.0.6 and earlier) exposes XSS via four vectors: (1) redirect in member.php, (2) to parameter in myhome.php, (3) TID parameter in post.php, and (4) redirect in index.php. The connected nuclei template confirms OpenBB 1.0.6 as vulnerable to open redirect/XSS with these...
CVE-2004-1965
Multiple cross-site scripting XSS vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 redirect parameter to member.php, 2 to parameter to myhome.php 3 TID parameter to post.php, or 4 redirect parameter to index.p...
CVE-2004-1785
The provided connected documents confirm a SQL injection vulnerability in Invision Power Board 1.3, specifically in the calendar.php component. The issue allows remote attackers to inject arbitrary SQL via the m parameter that controls the $this->chosen_month variable, enabling potential data ...
CVE-2003-1162
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...
CVE-2004-1966
Multiple SQL injection vulnerabilities in Open Bulletin Board OpenBB 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FID parameter in board.php, 2 sortorder, perpage, or id parameters in member.php, 3 forums parameter in search.php, or 4 PID or FID parameters ...