CVE-2005-0661

SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 lastvisit cookie...

CVE-2005-0886

Cross-site scripting XSS vulnerability in Invision Power Board 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP POST request...

CVE-2005-1200

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

CVE-2005-1347

UNVERIFIABLE NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader AcroRd32.exe 6.0 and earlier allows remote attackers to cause a denial of service "Invalid-ID-Handle-Error" error and modify memory beginning at a particular address,...

CVE-2005-1327

Cross-site scripting XSS vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter...

CVE-2005-1327

CVE-2005-1327 is a cross-site scripting vulnerability in Woltlab Burning Board 2.3.1 PL2 and earlier, affecting the pms.php script where the folderid parameter is not sanitized. The issue allows remote attackers to inject arbitrary HTML/script that is executed in a user’s browser within the conte...

SQL-injections in Invision Power Board v2.0.1

SQL-injections in Invision Power Board v2.0.1 -------------------------- Program: IPB 2.0.1 Homepage: http://www.invisionboard.com Vulnerable Versions: IPB 2.0.1 Has found: CENSORED Vulnerability has been found in forum Invision Power Board v2.0.1 At citing messages. Here an example:...

CVE-2005-1285

Cross-site scripting XSS vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter...

CVE-2005-1285

CVE-2005-1285 affects WoltLab Burning Board (thread.php) and earlier 2.3.1, where an XSS flaw can be exploited via the hilight parameter to inject script/HTML. The vulnerability is rooted in insufficient input sanitization for hilight in thread.php. CVSS info from NVD shows a medium severity (3.0...

Invision Power Board 2.0.1 - QPid SQL Injection

Invision Power Board 2.0.1 - QPid SQL Injection source: https://www.securityfocus.com/bid/13375/info Invision Power Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)

WoltLab Burning Board = 2.3.1 PL2 - XSS Vulnerability Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 PL 2 Type: XSS Discovered by R and deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind of use. See 1...

Invision Power Board 2.0.1 - 'QPid' SQL Injection

source: https://www.securityfocus.com/bid/13375/info Invision Power Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

WoltLab Burning Board 2.3.1 - PMS.php Cross-Site Scripting

WoltLab Burning Board 2.3.1 - PMS.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13353/info WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

WoltLab Burning Board 2.3.1 - 'PMS.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13353/info WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in th...

[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)

SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...

CVE-2005-1285

Cross-site scripting XSS vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter...

WoltLab Burning Board 2.3.1 - thread.php Cross-Site Scripting

WoltLab Burning Board 2.3.1 - thread.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

Woltlab Burning Board XSS / SQL Injection Vulnerabilities

Binary data 2848.prm...

WoltLab Burning Board 2.3.1 - 'thread.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user ...