XSS bug in vBulletin

Vulnerable systems: Jelsoft vBulletin 2.2.9 and prior Exploit: http://www.vbulletin.com/forum/memberlist.php? s=23c37cf1af5d2ad05f49361b0407ad9e&what=""Scriptjavascript:alert document.cookie/Script you can use this code thanx for SP.IC: ?PHP // vBulletin XSS Injection Vulnerability: Exploit // --...

vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/6226/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser o...

vBulletin 2.02.2.x - memberlist.php Cross-Site Scripting

vBulletin 2.02.2.x - memberlist.php Cross-Site Scripting source: https://www.securityfocus.com/bid/6226/info vBulletin does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link...

CVE-2002-1286

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the...

[SECURITY] [DSA 195-1] New Apache-Perl packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 195-1 [email protected] http://www.debian.org/security/ Martin Schulze November 13th, 2002 http://www.debian.org/security/faq -...

DSA-195 apache-perl - several vulnerabilities

Bulletin has no description...

vBulletin 2.2.72.2.8 - HTML Injection

vBulletin 2.2.72.2.8 - HTML Injection source: https://www.securityfocus.com/bid/6337/info Problems with vBulletin could make it possible for an attacker to inject arbitrary HTML in vBulletin forum messages. vBulletin does not sufficiently filter potentially malicious HTML code from posted message...

vBulletin 2.2.7/2.2.8 - HTML Injection

source: https://www.securityfocus.com/bid/6337/info Problems with vBulletin could make it possible for an attacker to inject arbitrary HTML in vBulletin forum messages. vBulletin does not sufficiently filter potentially malicious HTML code from posted messages. As a result, when a user chooses to...

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting

Perception LiteServe 2.0.1 - DNS Wildcard Cross-Site Scripting source: https://www.securityfocus.com/bid/6131/info A cross site scripting vulnerability has been discovered in Perception LiteServe. It should be noted that this vulnerability is limited to server configurations with Wildcard DNS...

lycosxss.txt

---------------------------------------- Lycos XSS/Cookie problems Advisory ---------------------------------------- Lycos XSS/Cookie problems 05/11/02 - by "N|ghtHawk" Thijs Bosschert nighthawkathackers4hackers.org ------------------- Vendor Information: ------------------- Homepage :...

DSA-188 apache-ssl - several vulnerabilities

Bulletin has no description...

Mojo Mail 2.7 - Email Form Cross-Site Scripting

Mojo Mail 2.7 - Email Form Cross-Site Scripting source: https://www.securityfocus.com/bid/6040/info Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing...

Mojo Mail 2.7 - Email Form Cross-Site Scripting

source: https://www.securityfocus.com/bid/6040/info Mojo Mail does not filter HTML tags from URI parameters, making it prone to cross-site scripting attacks. As a result, it is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser o...

IBM Websphere Edge Server 3.69/4.0 - HTTP Header Injection

source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains...

IBM Websphere Edge Server 3.694.0 - HTTP Header Injection

IBM Websphere Edge Server 3.694.0 - HTTP Header Injection source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for a...

IBM Websphere Edge Server 3.6/4.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/6000/info A vulnerability has been discoverered in the Caching Proxy component bundled with the IBM Websphere Edge Server. It has been reported that the Caching Proxy is vulnerable to cross site scripting attacks. Due to insufficient sanitization of...

Microsoft Internet Explorer 5/6 - Cached Objects Zone Bypass

source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with Service Pack 1 and Internet Explorer 5 with Service Pack 2 a...

Microsoft Internet Explorer 56 - Cached Objects Zone Bypass

Microsoft Internet Explorer 56 - Cached Objects Zone Bypass source: https://www.securityfocus.com/bid/6028/info Multiple vulnerabilities have been reported for Microsoft Internet Explorer. These vulnerabilities have been reported to affect Internet Explorer 5.5 to 6.0. Internet Explorer 6.0 with...

KMMail 1.0 - E-Mail HTML Injection

KMMail 1.0 - E-Mail HTML Injection source: https://www.securityfocus.com/bid/6013/info kmMail does not sufficiently sanitize HTML and script code from the body of e-mail messages. As a result, an attacker may send a malicious message to a user of kmMail that includes arbitrary HTML and script cod...

New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums

Two security vulnerabilities in YaBB allows stealing users cookies and hijacking users accounts. Tested on: YaBB 1.40 & 1.41 Summary : YaBB is a leading provider of free, downloadable php forums for webmasters. Two security vulnerabilities in the product allows a remote attacker to steal users...