78 matches found
FuseTalk forum XSS
The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2004-1994
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...
CVE-2004-1994
FuseTalk 4.0 contains a vulnerability where remote attackers can ban other users by making a direct request to banning.cfm. The description confirms network-attack feasibility with partial availability impact but provides no specific exploit details, affected versions, root-cause analysis, or rem...
CVE-2004-1995
Cross-Site Request Forgery CSRF vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm...
CVE-2004-1995
FuseTalk 2.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets remote attackers create arbitrary user accounts via a request to adduser.cfm. The issue is tied to the adduser.cfm endpoint and is described in multiple sources (including PT-2004-2891) as enabling account cre...
CVE-2004-1594
Cross-site scripting XSS vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag...
CVE-2004-1594
CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...
CVE-2004-1995
Cross-Site Request Forgery CSRF vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm...
PT-2004-2891 · Fusetalk · Fusetalk
Name of the Vulnerable Software and Affected Versions: FuseTalk version 2.0 Description: A Cross-Site Request Forgery CSRF issue allows remote attackers to create arbitrary accounts via a link to "adduser.cfm". Recommendations: For FuseTalk version 2.0, consider disabling the account creation...
FuseTalk Forum img src Tag XSS
The remote host is using FuseTalk, a web-based discussion forum. A vulnerability exists in the script 'tombstone.cfm' that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
XXS in fusetalk forum
Vendor : fusetalk URL : http://www.fusetalk.com/ Version: 4.0 Risk : Cross site scripting Description: Fusetalk is a discussion forum solution that provides a powerful and simple method of web-based collaboration. Cross site scripting: The filtering script for the img src= doesnt filter " if...
CVE-2004-1594
Cross-site scripting XSS vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag...
FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of these issues is insufficient sanitization of user-supplied data. The...
FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities
FuseTalk Forum 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11407/info FuseTalk Forum is reported prone to multiple input validation vulnerabilities. These issues may allow a remote attacker to carry out cross-site scripting attacks. The cause of...
CVE-2004-1994
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...
E-Zone Media FuzeTalk 2.0 - 'AddUser.cfm' Administrator Command Execution
source: https://www.securityfocus.com/bid/10276/info It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the application to properly validate the origin of user supplied data. This issue...
E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution
E-Zone Media FuzeTalk 2.0 - AddUser.cfm Administrator Command Execution source: https://www.securityfocus.com/bid/10276/info It has been reported that FuseTalk is affected by an administrator command execution vulnerability in the adduser.cfm script. This issue is due to a failure of the...