CVE-2005-1285: Undefined Security Weakness

Cross-site scripting XSS vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter...

WoltLab Burning Board 2.3.1 - PMS.php Cross-Site Scripting

WoltLab Burning Board 2.3.1 - PMS.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13353/info WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

WoltLab Burning Board 2.3.1 - 'PMS.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13353/info WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in th...

[SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)

SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...

CVE-2005-1285

Cross-site scripting XSS vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter...

Woltlab Burning Board XSS / SQL Injection Vulnerabilities

Binary data 2848.prm...

WoltLab Burning Board 2.3.1 - thread.php Cross-Site Scripting

WoltLab Burning Board 2.3.1 - thread.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

WoltLab Burning Board 2.3.1 - 'thread.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in the browser of an unsuspecting user ...

CVE-2005-1201

Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...

CVE-2005-1201

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

CVE-2005-1200

AZ Bulletin Board (AZBB) < 1.0.07d is affected by a PHP remote file inclusion in main_index.php (AZBB 1.0.07a–c) via dir_src or abs_layer parameters, enabling arbitrary PHP code execution on a remote server. The official CVE entry (CVE-2005-1200) documents RSF/URL-based code inclusion in AZBB....

CVE-2005-1200

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1201: Undefined Security Weakness

Multiple directory traversal vulnerabilities in AZ Bulletin board AZbb before 1.0.08 allow 1 remote authenticated users with administrative privileges to delete arbitrary files via a .. dot dot in the URL to adminavatar.php or adminattachment.php or 2 remote attackers to enumerate files via a...

CVE-2005-1200: Undefined Security Weakness

PHP remote file inclusion vulnerability in mainindex.php in AZ Bulletin Board AZbb 1.0.07a through 1.0.07c allows remote attackers to execute arbitrary PHP code by modifying the 1 dirsrc or 2 abslayer parameter to reference a URL on a remote web server that contains the code...

invision131sql.txt

This is a multi-part message in MIME format. ------=NextPart000000501C53EE6.43632B60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://www.digitalparadox.org/services.ah Hs...

CVE-2005-1070

CVE-2005-1070 describes a SQL injection in Invision Power Board 1.3.1 Final and earlier, occurring in index.php via the st parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and is indicated to affect versions up to 1.3.1 Final and earlier; specific impact and ...

CVE-2005-1070

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2005-1070: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to execute arbitrary SQL commands via the st parameter...

Invision board 1.3.1 and below are vulnerable to a sql injection vulnerability [PATCH INCLUDED]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://www.digitalparadox.org/services.ah Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Severity: Medium Title: Invision board 1.3.1 and below are vulnerable to a sql injection...

WebCT 4.1 vulnerable to XSS attacks

The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...