CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2004-1969

The avatar upload capability in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript...

CVE-2003-1162

Tritanium Bulletin Board 1.2.3 is affected by CVE-2003-1162. The vulnerability arises from index.php allowing remote attackers to read and reply to arbitrary messages by manipulating thread_id, forum_id, and sid parameters. The available sources describe the affected component and negligence in p...

CVE-2004-1967

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains CSRF vulnerabilities in cp_forums.php, cp_usergroup.php, cp_ipbans.php, myhome.php, post.php, and moderator.php that allow remote attackers to execute arbitrary code by including code in an image tag or a link. The PT-2004-2864 entry confirm...

CVE-2004-1863

CVE-2004-1863 affects XMB (extreme message board) 1.9 beta/Nexus beta. The vulnerability family is cross-site scripting (XSS): remote attackers can inject arbitrary script/HTML via (1) u2uheader in editprofile.php, (2) restrict in member.php, (3) misc.php, (4) today.php, and (5) an arbitrary para...

CVE-2004-1966

Open Bulletin Board (OpenBB) 1.0.6 and earlier contains multiple SQL injection flaws allowing remote SQL command execution via parameters: FID in board.php; sortorder, perpage, or id in member.php; forums in search.php; and PID or FID in post.php. Root cause is unvalidated input in these endpoint...

[Full-disclosure] Easy Message Board Directory Traversal and Remote Command

============================================================ ============================================================ Title: Easy Message Board Directory Traversal and Remote Command Execution Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 08/05/2005...

Easy Message Board - Directory Traversal

Easy Message Board - Directory Traversal source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root...

Easy Message Board - Remote Command Execution

Easy Message Board - Remote Command Execution source: https://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input...

Easy Message Board - Directory Traversal

source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example/com/cgi-bin/emsgb/easymsgb.pl?print=../../../../../../../../etc/passwd...

Easy Message Board - Remote Command Execution

source: https://www.securityfocus.com/bid/13555/info Easy Message Board is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. http://www.example.com/cgi-bin/emsgb/easymsgb.pl?print=|id|...

Multiple Vulnerabilities In Invision Power Board

GulfTech Security Research May 5th, 2005 Vendor : Invision Power Services URL : http://www.invisionboard.com/ Version : All Versions Prior To 2.0.4 Risk : Multiple Vulnerabilities Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with spee...

Invision Power Board index.php Multiple Parameter XSS

The version of Invision Power Board installed on the remote host suffers from a cross-site scripting vulnerability due to its failure to sanitize user input via the 'act' parameter to the 'index.php' script. An unauthenticated attacker can exploit this flaw by injecting malicious HTML and script...

Invision Board Multiple XSS and SQL Injection

Binary data 2879.prm...

CVE-2005-1443

CVE-2005-1443 affects Invision Power Board (IPB) versions 2.0.3 and 2.1 Alpha 2. The vulnerability is a set of cross-site scripting (XSS) flaws in index.php allowing an attacker to inject arbitrary script/HTML via the (1) act, (2) Members, (3) calendar, or (4) HID parameters. The connected Red Ha...

Invision Power Board (IP.Board) 2.0.3/2.1 - 'Act' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13483/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

Invision Power Board (IP.Board) 2.0.32.1 - Act Cross-Site Scripting

Invision Power Board IP.Board 2.0.32.1 - Act Cross-Site Scripting source: https://www.securityfocus.com/bid/13483/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

CVE-2005-1327

Cross-site scripting XSS vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter...

CVE-2005-1076

Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2005-0216

Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...