Easy Forum 2.5 New User Image File HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

EV0085.txt

New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...

[eVuln] Easy Forum XSS Vulnerability

New eVuln Advisory: Easy Forum XSS Vulnerability http://evuln.com/vulns/85/summary.html --------------------Summary---------------- eVuln ID: EV0085 CVE: CVE-2006-0877 Software: Easy Forum Sowtware's Web Site: http://hot-things.net/?q=eforum Versions: 2.5 Critical Level: Harmless Type: Cross-Site...

Easy Forum 2.5 - New User Image File HTML Injection

source: https://www.securityfocus.com/bid/16958/info Easy Forum is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be...

CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

Cross site scripting

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0877

The CVE-2006-0877 entry refers to a Cross-Site Scripting vulnerability in Easy Forum 2.5 allowing remote injection of arbitrary script via the image variable. Connected sources confirm affected software (Easy Forum 2.5) and vulnerable script join.php with unsanitized image data; exploit code is a...

CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...