583 matches found
CVE-2014-8869
Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...
Open redirect
Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...
CVE-2014-8870
Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...
CVE-2014-8869
Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...
CVE-2014-8869
The CVE-2014-8869 entry concerns the Tapatalk plugin for Woltlab Burning Board 4.0 (com.tapatalk.wbb4). Affected module: mobiquo/smartbanner/welcome.php where improper encoding of two URL parameters (app_android_id and app_kindle_url) enables cross-site scripting. The vulnerability allows remote ...
CVE-2014-8870
CVE-2014-8870 concerns the Open Redirect vulnerability in the Tapatalk (com.tapatalk.wbb4) plugin for Woltlab Burning Board 4.0. The issue is triggered by supplying a malicious URL in the board_url parameter of mobiquo/smartbanner/welcome.php, allowing remote attackers to redirect users to arbitr...
Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities
WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...
Tapatalk for WoltLab Burning Board URI Redirection Vulnerability
WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. An open redirection vulnerability exists in Tapatalk for WoltLab Burning Board that allows an attacker to construct a malicious URI, trick users into parsing it, and redirect them to an arbitrary web site for phishing...
WoltLab Burning Board 4.0 Tapatalk Open Redirect
The Tapatalk Plugin com.tapatalk.wbb4 for WoltLab Burning Board 4.0 prior to version 1.1.2 allowed to redirect users to arbitrary URLs. This was possible by specifying the target URL in the URL parameter boardurl in URLs like the following:...
WoltLab Burning Board 4.0 Tapatalk Cross Site Scripting
Advisory: Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Tapatalk plugin for the WoltLab Burning Board forum software, which allows attackers to inject arbitrary JavaScript code via URL parameters...
Woltlab Burning Board 2.x ModCP.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14617/info Woltlab Burning Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Woltlab Burning Board 2.x Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18423/info Woltlab Burning Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...
Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org dork: Powered by...
Woltlab Burning Board <= 2.3.1 register.php SQL-Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use IO::Socket::INET; $| = print Woltlab Burning Board = 2.3.1 Exploit Vulnerability discovered by GulfTech Security Research Visit www.security-project.org Exploit by deluxe89 ---------- ; my $host = 'www.security-project.org'; my $pa...
Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection Vulnerability
No description provided by source. Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injection Vulnerability + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor: http://www.woltlab.com/de/ +...
WoltLab Burning Board 2.3.1 Thread.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in th...
Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow
No description provided by source. !/usr/bin/perl Ashampoo Burning Studio Elements 10.0.9 .ashprj Heap Overflow Vulnerability Vendor: Ashampoo GmbH & Co. KG Product web page: http://www.ashampoo.com Affected version: 10.0.9 Summary: Ashampoo Burning Studio Elements offers you everything you need ...
Burning Board Lite 1.0.2 Shell Upload Vulnerability
No description provided by source...
Woltlab Burning Board Lite Addon (lexikon.php) SQL Injection Vulnerability
No description provided by source. .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Woltlab Burning Board Lite Addon lexikon.php SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Vulnerabilities SQL Injection +...