EUVD-2002-0223

Malware in sbrugna...

EUVD-2001-0433

Malware in sbrugna...

EUVD-2005-4306

Malware in sbrugna...

EUVD-2001-0434

Malware in sbrugna...

DCForum+ 1.2 Subject Field HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8384/info DCForum+ is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code in the subject field of posts to the bulletin board. This is because the script...

DCForum 6.0 - Remote Admin Privilege Compromise Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2728/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. Versions of DCForum are vulnerable to attacks which can yield an elevation of privileges an...

DCForum 1-6 DCBoard Script Page Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15885/info DCForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

DCForum 1-6 Arbitrary File Disclosure Vulnerability

No description provided by source. source : http://www.securityfocus.com/bid/1951/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. The script improperly validates user-supplied input, which allows the remote viewing of...

DCForum Information Disclosure

Exploit Title: DCForum Information Disclosure Date: 01/11/2012 Author: r45c4l @r45c4l Email: [email protected] Script url: http://webscripts.softpedia.com/script/Discussion-Boards/DCForum-20872.html Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

DCForum - auth_user_file.txt File Multiple Information Disclosure Vulnerabilities

DCForum - authuserfile.txt File Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/56383/info DCForum is prone to multiple information-disclosure vulnerabilities. Exploiting these issues may allow an attacker to obtain sensitive information that may aid in...

DCForum - 'auth_user_file.txt' File Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/56383/info DCForum is prone to multiple information-disclosure vulnerabilities. Exploiting these issues may allow an attacker to obtain sensitive information that may aid in further attacks. http://www.example.com/cgi-bin/Userinfo/authuserfile.txt...

DCForum Remote Admin Privilege Compromise Vulnerability

Exploit for php platform in category web applications Exploit Title: DCForum Information Disclosure Date: 01/11/2012 Author: r45c4l @r45c4l Email: email protected Script url: http://webscripts.softpedia.com/script/Discussion-Boards/DCForum-20872.html Version: N/A Category: WebApp CVE :...

CVE-2005-4311

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...

CVE-2005-4311

Cross-site scripting XSS vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via 1 the page parameter in dcboard.php and 2 unspecified search parameters...

CVE-2005-4311

DCForum 6.25 and earlier (and possibly DCForum+ 1.x) are affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary scripts via the page parameter in dcboard.php and via unspecified search parameters. Public references indicate an XSS with a CVSS...

DCForum XSS vuln.

DCForum XSS vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dcforum-xss-vuln.html vendor:www.dcscripts.com/dcforum.shtml affected version: 6.25 and prior Product Description: DCForum a complete bulletin board system from DCScripts. Its main...

DCForum 1-6 DCBoard Script - 'Page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15885/info DCForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

[UNIX] DCForum+ XSS Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

ZH2003-21SA (security advisory): DcForum+ XSS Vulnerability

ZH2003-21SA security advisory: DcForum+ XSS Vulnerability Published: 10 august 2003 Released: 10 august 2003 Name: DcForum+ Affected Systems: 1.2 Issue: Remote attackers can inject XSS script Author: G00db0y zone-h org Vendor: http://www.dcscripts.com/dcforump.shtml Description Zone-h Security Te...

DCForum+ 1.2 - 'Subject' HTML Injection

source: https://www.securityfocus.com/bid/8384/info DCForum+ is prone to an HTML injection vulnerability. An attacker may exploit this issue by including hostile HTML and script code in the subject field of posts to the bulletin board. This is because the script that processes posts does not...