78 matches found
FuseTalk 4.0 - blogincludecommoncomfinish.cfm?FTVAR_SCRIPTRUN Cross-Site Scripting
FuseTalk 4.0 - blogincludecommoncomfinish.cfm?FTVARSCRIPTRUN Cross-Site Scripting source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...
fusetalk CSS (autherror.cfm)
Hello everyone, After trying to report a SQL bug autherror.cfm to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure...
FuseTalk 4.0 - AuthError.cfm Multiple Cross-Site Scripting Vulnerabilities
FuseTalk 4.0 - AuthError.cfm Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24564/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit...
fusetalk CSS (comfinish.cfm)
Hello everyone, After trying to report a SQL bug autherror.cfm to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure...
fusetalkpoc-sql.txt
Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...
FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVAR_SCRIPTRUN Cross-Site Scripting
FuseTalk 4.0 - forumincludecommoncomfinish.cfm?FTVARSCRIPTRUN Cross-Site Scripting source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...
FuseTalk 4.0 - 'AuthError.cfm' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/24564/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...
FuseTalk 4.0 - 'forum/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...
FuseTalk 4.0 - 'blog/include/common/comfinish.cfm?FTVAR_SCRIPTRUN' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24563/info FuseTalk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...
Sql injection
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3273
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3273
SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3273
FuseTalk 2.0 is affected by an SQL injection in index.cfm (and related forum error handling paths) that allows remote attackers to execute arbitrary SQL commands. The vulnerability involves unsafely handling user-supplied input (notably the txForumID/ errorcode parameters) in FuseTalk’s ColdFusio...
fusetalk SQL (autherror.cfm)
Hello everyone, After trying to report bugs to FuseTalk, and seeing them providing patches to customers dropping new fixed .cfm files in a private place reserved to customers without giving proper credits and without reporting them publicly we were following the Full Disclosure Policy v2.0, we...
FuseTalk 2.03.0 - AuthError.cfm SQL Injection
FuseTalk 2.03.0 - AuthError.cfm SQL Injection source: https://www.securityfocus.com/bid/24528/info FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attack...
FuseTalk 2.0/3.0 - 'AuthError.cfm' SQL Injection
source: https://www.securityfocus.com/bid/24528/info FuseTalk is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...
FuseTalk Index.CFM SQL注入漏洞
FuseTalk是一款WEB应用程序。 FuseTalk不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Index.CFM'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 FuseTalk 2.0 目前没有解决方案提供： http://www.fusetalk.com/...
Fusetalk SQL injection submission.
Greetings, I have found sql injection in FuseTalk 2.0 during a legitmate audit. Resending because I got MIME errors to [email protected]. I have exchanged emails with [email protected] who needed more information when I originally sent an email to [email protected] Operating...
CVE-2002-2166
CVE-2002-2166 is an XSS vulnerability reported in FuseTalk 2.0 and 3.0. The public records indicate that remote attackers could inject arbitrary HTML/script into pages, potentially affecting user data integrity without affecting confidentiality or availability per the CVSS metrics (base score 4.3...