XMB Forum 1.8 buddy.php action Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these...

CVE-2005-3364: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via 1 the buddy parameter in buddy.php, 2 the u2uid parameter in u2u.php, and 3 an invalid theme file in the themes action to ctrtools.php...

DBoardGear SQL Injection

DboardGear .. Search By Google :- by DboardGear Gr33tz :- aLMaSTeR HaCKeR .. SQL Injection's FOunder - | [email protected]|- Security4Arab .. A'Where Home .. 1- SQL Injection in buddy.php http://www.site.com/dboard/buddy.php?action=add&buddy=|aLMaSTeR 2-SQL Injection in u2a.php...

CVE-2003-0483: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via 1 the member parameter to member.php or 2 the action parameter to buddy.php...