CVE-2007-3975

CVE-2007-3975 is a Cross-site Scripting (XSS) vulnerability in Elite Forum 1.0.0.0, exploitable via the title parameter in a ptopic action on index.php. The public text in the connected documents confirms the vulnerability existence but does not provide concrete technical details beyond the param...

CVE-2007-3975

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

Code injection

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

CVE-2007-3592

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

CVE-2007-3591

Unspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote attackers to modify profile information via unspecified vectors related to "a remote form," probably related to direct requests and missing authorization checks...

CVE-2007-3592

Vulnerability CVE-2007-3592 affects Elite Bulletin Board (earlier than 1.0.10). The PM.php module allows remote authenticated users to delete arbitrary private messages and other attacks by modifying id fields, indicating improper input validation of message identifiers. The issue enables manipul...

CVE-2007-3591

The CVE-2007-3591 issue affects Elite Bulletin Board, prior to version 1.0.10, in the Profile.php handling. The root cause is described as missing authorization checks on a remote form, enabling remote modification of profile information via unspecified vectors. Impact is limited to unauthorized ...

CVE-2007-3592

PM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete arbitrary PM messages and conduct other attacks via modified id fields...

Unfixed XSS vulnerability at www.elite-it.com

Security researcher MaXWeL, has submitted on 03/06/2007 a cross-site-scripting XSS vulnerability affecting www.elite-it.com, which at the time of submission ranked 1050762 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is...

Pie Cart Pro (Inc_Dir) Remote File Include Vulnerabilities

No description provided by source. ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA http://www.doodlebabies.com/...

magicnewspro.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

MagicNews-1.0.3.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

Lift the download limit, take a dip cafe-vulnerability warning-the black bar safety net

Cafes bring their own music quite cheesy, without a hint of sporty new, As“New Age”of Internet users, you can willingly take? In this case you sure want to download from the Internet songs, but currently most of the Internet cafes, the function is disabled, the only way is to hack it blockade, so...

CVE-2006-2673

Cross-site scripting XSS vulnerability in search.html in Bulletin Board Elite-Board E-Board 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box...

CVE-2006-2673

CVE-2006-2673 is an XSS vulnerability in Bulletin Board Elite-Board (E-Board) 1.1, residing in search.html and exploitable via the search box to inject arbitrary script/HTML. The connected documents confirm affected component (search.html) and version (E-Board 1.1); root cause details beyond gene...

Bulletin Board Elite-Board v.1.1

Bulletin Board Elite-Board v.1.1 Homepage: http://eng.e-board.net.ru/about/ Description: Multipurpose multifunctional public bulletin board for your website. Easy to install and to use. Has all possible scripts functions of the same type and does not need additional modules and database. It works...

CVE-2005-3971

Cross-site scripting XSS vulnerability in the login form in Citrix MetaFrame Secure Access Manager 2.0 through 2.2 and NFuse Elite 1.0 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2005-3971

CVE-2005-3971 affects Citrix MetaFrame Secure Access Manager 2.0–2.2 and NFuse Elite 1.0. It is a cross-site scripting (XSS) vulnerability in the login form that allows remote attackers to inject arbitrary web script or HTML via the username field. The connected sources document this vulnerabilit...

RANKBOX <= XSS vulnerability

Advisory 1 Title: "RANKBOX = XSS vulnerability" Author: spyburn Contact: [email protected] Website: elitemexico.org Date: 07/11/2005 Risk: High Vendor Url: http://chamberofgold.com Affected Software: RANKBOX Non Affected: We Are: ELITE MEXICO...

HYSA-2005-009.txt

------------------------------------------------------ HYSA-2005-009 h4cky0u.org Advisory 009 ------------------------------------------------------ Date - Tue Nov 1 2005 TITLE: ====== Elite Forum 1.0.0.0 XSS Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Elite Forum 1.0.0.0 INFO:...