3 matches found
OpenBB XSS
The remote host seems to be running OpenBB, a forum management system written in PHP. The remote version of this software is vulnerable to cross-site scripting attacks, through the script 'board.php'. Using a specially crafted URL, an attacker can cause arbitrary code execution for third party...
miniBB index.php user Parameter SQL Injection
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a SQL injection attack. Input to the 'user' parameter of index.php not properly sanitized. A remote attacker could exploit this to execute arbitrary SQL queries against the...
miniBB bb_func_usernfo.php Website Name Field XSS
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a cross-site scripting bug. A remote attacker could exploit this to impersonate a legitimate user by tricking them into requesting a maliciously crafted URL. %NASLMINLEVEL 703...