Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities

Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55220/info Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Web Wiz Forums - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55220/info Web Wiz Forums is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

Sql injection

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

CVE-2012-4060

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to profile.asp, forum.asp, or topic.asp. The connected records confirm the affected component and vectors, but no exploitation details or patch/remediation...

PT-2012-5178

Name of the Vulnerable Software and Affected Versions ASP-DEv XM Forums version RC3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the following API endpoints: "profile.asp", "forum.asp", or "topic.asp"...

CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

UBUNTU-CVE-2012-3392

mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...

Password Leaks Continue: Billabong, NVIDIA Accounts Compromised

UPDATE: A string of high-profile hacks against online forums and companies continued on Thursday, with news that forums hosted by the technology firm NVIDIA as well as the surf-ware vendor Billabong. A document posted on the Web site codepaste.net purports to contain both administrative- and user...

Android Forums hacked, User Credentials Stolen

Phandroid's Android Forums Web site is hacked and user account details stolen, according to a notice posted online. The data includes the user names, e-mail addresses, hashed passwords, and registration IP addresses of the forums' more than 1 million users. If you are one of them, you should chan...

Dove Forums 1.0.3 Cross Site Request Forgery

In The Name Of Allah +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Exploit Title:Dove Forums-Add admin CSRF @@@@@ | Date : 2012-06-26 @ @ + Author :Ashiyane Digitl Security Team @ @@@ @ | Vendor :http://www.doveforums.com/ @ @ @ @ + Version: 1.0.3 @ @@ ...

Adele Bests Adderall As Affiliate Spammers Offer Music Downloads

Cyber criminals long ago discovered that there’s a big market for pharmaceuticals online, prompting a tsunami of pharmaceutical spam offering everything from “herbal Viagra” to Prozac and Adderall. But new data from security firm Webroot suggests that scammers are experimenting with new products,...

Vanilla Forums 2.0.18.4 Poll 0.9 Stored Cross Site Scripting

Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin To create the XSS firstly create a...

Vanilla Forums 2.0.18.4 Tagging Enhanced 1.0.1 Stored Cross Site Scripting

Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Tagging Enhanced plugin 1.0.1 http://vanillaforums.org/download http://vanillaforums.org/addon/tagging-plugin This...

Vanilla Forums 2.0.18.4 Tagging Stored Cross Site Scripting

Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag. I used alert'xss' You will have to use a proxy /...

Vanilla Forums Poll Plugin 0.9 Stored XSS

Exploit for php platform in category web applications Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting

vanilla forums poll plugin 0.9 - Persistent Cross-Site Scripting Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download...

Vanilla Forums 2.0.18.4 Tagging Stored XSS

Exploit for php platform in category web applications Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post you...