124 matches found
动网(DVBBS)多个跨站脚本执行(CSS/XSS)漏洞
DVBBS是一款由WWW.ASPSKY.NET开发和维护的开放源码Asp论坛程序。 DVBBS中存在多个跨站脚本漏洞，攻击者可以利用这个漏洞在用户浏览器中执行任意脚本代码。 起因是没有正确的过滤用户输入。 Dvbbs Dvbbs 7.1 Sp2；Dvbbs Dvbbs 7.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://down.dvbbs.net/SoftView/SoftView2455.html...
动网(DVBBS)论坛上传文件漏洞
upfile.asp中有这样一句 formPath&yearnow&monthnow&daynow&hournow&minutenow&secondnow&ranNum&"."&fileExt...
动网论坛DVBBS) logout.asp页面存在注入漏洞
logout.asp: /-------------------------------------------------------------------------- /-------------------------------------------------------------------------- 因程序当中的logout.asp页面对于 activeuser="delete from online where username='"&membername&"'"并没有做好过滤导致了问题的产生, DVBBS 请安装最新动网论坛...
How to become a ASP Trojan master-vulnerability warning-the black bar safety net
Name: how to make a picture of the ASP Trojan can display pictures Built an asp file, the content of!-- of i nclude file="ating.jpg"-- 找 一 个 正常 图片 ating.jpg, insert the word Trojan,such as the ice Fox, with ultraedit to hex compiled, insert a picture, in order to run successfully, but also to...
DVBBS V7. 1 SP1 Boke injection vulnerabilities in ASP to use the program-vulnerability warning-the black bar safety net
Articleauthor: execsl Information source: evil octal informationsecurityteam www.eviloctal.com） Just in thesecuritythe announcement of version see: Dynamic networkForum（DVBBS V7. 1 SP1BokesecurityUpdate Patch 2 0 0 6 0 3 0 2 Information source:evil octal informationsecurityteam www.eviloctal.com）...
All the forums are there BUG-vulnerability warning-the black bar safety net
I found an almost all forums have issues, the problem says big say small is not small,is now all Forum is not almost all support directly the FLASH file directly after the display of the Visual? Just do a FLASH VIRUS is not on the forum cause a great impact? Or do Go directly to HTML the BACKDOOR...
CVE-2005-2588
Multiple cross-site scripting XSS vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter to dispbbs.asp, 2 name parameter to dispuser.asp, or the 3 title, 4 view, or 5 act parameter to boardhelp.asp...
CVE-2005-2588
Multiple cross-site scripting XSS vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter to dispbbs.asp, 2 name parameter to dispuser.asp, or the 3 title, 4 view, or 5 act parameter to boardhelp.asp...
CVE-2005-2588
Vulnerability: Multiple cross-site scripting (XSS) flaws in DVBBS 7.1 SP2 and earlier. Description: remote attackers can inject arbitrary web script via (1) page parameter to dispbbs.asp, (2) name parameter to dispuser.asp, or (3) title, (4) view, or (5) act parameter to boardhelp.asp. Impact: en...
CVE-2005-2588: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in DVBBS 7.1 SP2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the page parameter to dispbbs.asp, 2 name parameter to dispuser.asp, or the 3 title, 4 view, or 5 act parameter to boardhelp.asp...
dvbbsXSS.txt
DVBBS Multiple variable Cross site scripting vendor url:http://down.dvbbs.net/ SoftView/SoftView2455.html Advisory:http://lostmon.blogspot.com/2005/08/ dvbbs-multiple-variable-cross-site.html vendor notify:yes exploit available:yes OSVDB ID:18512 DVBBS contains a flaw that allows a remote cross...
Dvbbs 7.18.2 - dispuser.asp?name Cross-Site Scripting
Dvbbs 7.18.2 - dispuser.asp?name Cross-Site Scripting source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
Dvbbs 7.18.2 - boardhelp.asp Multiple Cross-Site Scripting Vulnerabilities
Dvbbs 7.18.2 - boardhelp.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...
Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting
Dvbbs 7.18.2 - dispbbs.asp?page Cross-Site Scripting source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
Dvbbs 7.1/8.2 - 'dispbbs.asp?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in th...
Dvbbs 7.1/8.2 - 'boardhelp.asp' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in th...
Dvbbs 7.1/8.2 - 'dispuser.asp?name' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14498/info DVBBS is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in th...
[SA16131] DVBBS "showerr.asp" Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-2318
Concrete details exist: CVE-2005-2318 is an XSS vulnerability in DVBBS 7.1 SP2, specifically in showerr.asp, exploitable via the action parameter. The issue allows remote injection of arbitrary script/HTML and is rated with CVSS v2.0 base metrics (AV:N/AC:M/Au:N/C:N/I:P/A:N; base score 4.3, MEDIU...