EUVD-2017-14750

Malware in sbrugna...

EUVD-2007-1598

Malware in sbrugna...

CVE-2025-10667

CVE-2025-10667 affects the itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the file /members/compose_msg.php caused by manipulation of the ID parameter, enabling remote exploitation. Multiple sources confirm the issue and publicly available exploit code may exist...

Authentication flaw

An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the email BBcode tag allows with authentication injecting arbitrary JavaScript into any forum message...

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

CVE-2017-5673

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

Design/Logic Flaw

In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject aka topic subject accepts JavaScript, leading to XSS. Six files are affected: crypsis/layouts/message/item/default.php, crypsis/layouts/message/item/top/default.php, crypsis/layouts/message/item/bottom/default.php,...

CVE-2007-1604

Multiple unrestricted file upload vulnerabilities in w-Agora Web-Agora allow remote attackers to upload and execute arbitrary PHP code 1 via a forum message with an attached file, which is stored under forums/hello/hello/notes/ or 2 by using browseavatar.php to upload a file with a double...

WebCT Campus Edition 3.84.x - HTML Injection

WebCT Campus Edition 3.84.x - HTML Injection source: https://www.securityfocus.com/bid/9999/info It has been reported that WebCT Campus Edition may be prone to an HTML injection vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in the browser of an unsuspecti...

CVE-2001-0970

The CVE-2001-0970 vulnerability affects TDForum 1.2 (tdforum12.cgi) where input is not properly filtered, enabling cross-site scripting by malicious forum posts. CERT/CC notes TDForum 1.2 and earlier do not properly filter HTML/script tags, with no practical vendor patch available (as of the sour...