WoltLab Burning Board Cross-Site Request Forgery Vulnerability

This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...

WoltLab Burning Board 3.x CSRF Vulnerability

WoltLab Burning Board is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WoltLab Burning Board (Lite) Version Detection

This script detects the installed version of WoltLab Burning Board Lite. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board wBB 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a differe...

CVE-2008-7192

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board wBB 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a differe...

CVE-2008-7192

The CVE-2008-7192 entry describes a Cross‑Site Request Forgery (CSRF) in WoltLab Burning Board (wBB) 3.x, specifically index.php, allowing an attacker to hijack a user’s authenticated session to trigger a deletion of private messages via the pmID parameter in a delete action on a PM page. Affecte...

CVE-2008-7192

Cross-site request forgery CSRF vulnerability in index.php in WoltLab Burning Board wBB 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a differe...

CVE-2009-2311

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board WBB3 allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627...

Sql injection

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board WBB3 allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627...

CVE-2009-2311

CVE-2009-2311 describes a SQL injection in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3). The vulnerability allows remote attackers to execute arbitrary SQL commands via the userID parameter on the RGalleryUserGallery page to index.php, a vector distinct from CVE-2008-4627. The NVD e...

CVE-2009-2311

SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board WBB3 allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627...

Woltlab Burning Board多个输入验证漏洞

BUGTRAQ ID: 34057 WoltLab Burning Board是一款可自定义的论坛程序。 WoltLab Burning Board没有执行任何有效性检查便允许用户通过HTTP请求执行某些操作，如果登录用户访问了恶意网页便可以将保密消息移动到回收站。 WoltLab Burning Board的wcf/acp/dereferrer.php模块没有验证对url参数的输入便返回给了用户，远程攻击者可以通过提交恶意请求导致在用户浏览器会话中执行任意HTML和脚本代码。 Woltlab Burning Board 3.0.x 厂商补丁： Woltlab -------...

Woltlab Burning Board Multiple Input Validation Vulnerabilities

Woltlab Burning Board is prone to multiple input-validation vulnerabilities, including: - Multiple security that may allow attackers to delete private messages - A cross-site scripting vulnerability - Multiple URI redirection vulnerabilities Attackers can exploit these issues to delete private...

Woltlab Burning Board <= 3.0.5 Multiple Input Validation Vulnerabilities - Active Check

Woltlab Burning Board is prone to multiple input-validation vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Woltlab Burning Board 3.0.x Cross Site Scripting

+---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat - stakerathotmaildotit | | thanks to s3rg3770 |...

Sql injection

SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action...

CVE-2008-5863

CVE-2008-5863 describes an SQL injection in the Woltlab Burning Board (wBB) Userlocator module, version 3.0, via the y parameter in the get_user action within locator.php. The affected component is the Userlocator module for wBB; the vulnerability arises from unsafely handling user input, enablin...

CVE-2008-5863

SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the y parameter in a getuser action...

Woltlab Burning Board SQL injection flaw

The remote web server contains a PHP script that is susceptible to SQL injection attacks. Description: The remote version of Burning Board includes an optional module, the Database module, that fails to properly sanitize the SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might...

Woltlab Burning Board SQL injection flaw

The remote web server contains a PHP script that is susceptible to SQL injection attacks. Description: The remote version of Burning Board includes an optional module, the Database module, that fails to properly sanitize the 'fileid' parameter of the 'infodb.php' script, which can be exploited to...