CVE-2014-8869

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

Open redirect

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

CVE-2014-8869

The CVE-2014-8869 entry concerns the Tapatalk plugin for Woltlab Burning Board 4.0 (com.tapatalk.wbb4). Affected module: mobiquo/smartbanner/welcome.php where improper encoding of two URL parameters (app_android_id and app_kindle_url) enables cross-site scripting. The vulnerability allows remote ...

CVE-2014-8870

CVE-2014-8870 concerns the Open Redirect vulnerability in the Tapatalk (com.tapatalk.wbb4) plugin for Woltlab Burning Board 4.0. The issue is triggered by supplying a malicious URL in the board_url parameter of mobiquo/smartbanner/welcome.php, allowing remote attackers to redirect users to arbitr...

CVE-2014-8870

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...

CVE-2014-8869

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

WoltLab Burning Board 4.0 Tapatalk Cross Site Scripting

Advisory: Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Tapatalk plugin for the WoltLab Burning Board forum software, which allows attackers to inject arbitrary JavaScript code via URL parameters...

Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...

Tapatalk for WoltLab Burning Board URI Redirection Vulnerability

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. An open redirection vulnerability exists in Tapatalk for WoltLab Burning Board that allows an attacker to construct a malicious URI, trick users into parsing it, and redirect them to an arbitrary web site for phishing...

WoltLab Burning Board 4.0 Tapatalk Open Redirect

The Tapatalk Plugin com.tapatalk.wbb4 for WoltLab Burning Board 4.0 prior to version 1.1.2 allowed to redirect users to arbitrary URLs. This was possible by specifying the target URL in the URL parameter boardurl in URLs like the following:...

Woltlab Burning Board 1.1.1/2.x galerie_onfly.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have...

Nero Burning ROM 9.4.13.2 - (iso compilation) Local Buffer Invasion PoC

No description provided by source. !/usr/bin/perl Title: Nero Burning ROM 9 iso compilation Local Buffer Invasion Proof Of Concept Product web page: http://www.nero.com Version tested: 9.4.13.2 OS platform used: Microsoft Windows XP Professional SP3 English Registers pick'a'chu:...

Woltlab Burning Board Teamsite Hack <= 3.0 - ts_other.php SQL Injection Exploit

No description provided by source. ----------------------------Information----------------------------------------------------- +Name : Woltlab Burning Board Teamsite Hack V3.0 tsother.php SQL Injection Exploit Python +Autor : Easy Laster +Date : 21.03.2010 +Script : Woltlab Burning Board Teamsit...

Woltlab Burning Board <= 2.3.1 register.php SQL-Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use IO::Socket::INET; $| = print Woltlab Burning Board = 2.3.1 Exploit Vulnerability discovered by GulfTech Security Research Visit www.security-project.org Exploit by deluxe89 ---------- ; my $host = 'www.security-project.org'; my $pa...

WoltLab Burning Board 2.0 - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5675/info WoltLab is prone to SQL injection attacks. This is due to insufficient sanitization of parameters handled by the board.php script, which may be supplied externally via the query string in a web request. The logi...

Woltlab Burning Board <= 1.0.2 / 2.3.6 - search.php SQL Injection Exploit (1)

No description provided by source. ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning...

Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection

No description provided by source...

WoltLab Burning Board 2.3.1 Thread.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13325/info WoltLab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary code in th...

WoltLab Burning Board 2.3.1 PMS.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13353/info WoltLab Burning Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...