CVE-2007-4088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 f, 3 quote, and 4 act parameters to cp.php; the 5 u parameter to user.php; the 6 f parameter to post.php; the 7 s parameter to topic.php; the 8 quot...

CVE-2007-4089: Undefined Security Weakness

Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to 1 forum.php, 2 cp.php, and possibly other unspecified components...

Vikingboard 0.1.2 - cp.php Cross-Site Scripting

Vikingboard 0.1.2 - cp.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

Vikingboard 0.1.2 - 'cp.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

Vikingboard 0.1.2 - 'cp.php' Information Disclosure

source: https://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is vulnerable; other versions may also be affected...

Vikingboard 0.1.2 - cp.php Information Disclosure

Vikingboard 0.1.2 - cp.php Information Disclosure source: https://www.securityfocus.com/bid/25060/info Vikingboard is prone to multiple information-disclosure weaknesses because attackers may disclose sensitive information that may be used in other attacks on the system. Vikingboard 0.1.2 is...

CVE-2006-3304

The CVE-2006-3304 entry documents an SQL injection vulnerability in DeluxeBB cp.php (versions 1.07 and earlier). The underlying issue is that the xmsn parameter is unsafely handled, allowing remote attackers to craft inputs that lead to arbitrary SQL commands being executed against the database. ...

CVE-2006-3304: Undefined Security Weakness

SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter...