47 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...
CVE-2012-6682
Cross-site scripting XSS vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbitrary web script or HTML via the mirrors parameter...
CVE-2012-6670
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
CVE-2012-6671
Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...
CVE-2012-6682
Cross-site scripting XSS vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbitrary web script or HTML via the mirrors parameter...
CVE-2012-6668
DragonByte Technologies vBShout for vBulletin (Shout Reports) is affected by XSS vulnerabilities in the Shout Reports feature prior to version 6.0.6. The issues arise in the reportreason parameter (actions/doreport.php) and the modnotes parameter (actions/updatereport.php), enabling remote attack...
CVE-2012-6682
DragonByte Technologies vBDownloads for vBulletin (versions 1.3.2 and earlier) is affected by a cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php, exploitable via the mirrors[] parameter. The underlying issue is a reflected/scriptable input handling flaw that allows r...
CVE-2012-6671
DragonByte Technologies Forumon RPG for vBulletin (module) is affected by cross-site scripting in actions/main.php prior to version 1.0.8. The vulnerability allows remote attackers to inject arbitrary script/HTML via monster[title] or monster[description] when creating a new monster, indicating a...
CVE-2012-6670
DragonByte Technologies vbActivity for vBulletin is affected by multiple XSS vulnerabilities in versions prior to 3.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via the reason parameter in actions/nominatemedal.php or actions/requestmedal.php. This is due to impro...
CVE-2012-6670
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
CVE-2012-6671
Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...
CVE-2012-6668
Multiple cross-site scripting XSS vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the 1 reportreason parameter in actions/doreport.php or 2 modnotes parameter in...
CVE-2012-6667
Cross-site scripting XSS vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action...
Cross site scripting
Cross-site scripting XSS vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action...
CVE-2012-6667
DragonByte Technologies vBShout for vBulletin contains a Cross‑site Scripting (XSS) vulnerability in vbshout.php. The issue allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action. The provided references indicate reflected XSS and standard impacts...
CVE-2012-6668: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the 1 reportreason parameter in actions/doreport.php or 2 modnotes parameter in...
CVE-2012-6670: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
CVE-2012-6671: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...
vBShout Persistent XSS
No description provided by source. Exploit Title: vBShout persistent XSS 0day Google Dork: DragonByte Technologies Ltd vbshout Date: 21/3/2012 9:00 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting from Team Odyessy. Today we will...