8 matches found
EUVD-2002-0585
Malware in sbrugna...
IcrediBB 1.1 Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4548/info IcrediBB is freely available web forum software. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. IcrediBB does not adequately filter script code...
CVE-2002-0590
Cross-site scripting CSS vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the 1 title or 2 body of posts...
CVE-2002-0590
Cross-site scripting (XSS) in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies via the title or body of posts. The vulnerability affects the web application’s posting features and stems from improper handling/encoding of user-supplied input. Impact is descri...
CVE-2002-0590
Cross-site scripting CSS vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the 1 title or 2 body of posts...
IcrediBB 1.1 - Script Injection
source: https://www.securityfocus.com/bid/4548/info IcrediBB is freely available web forum software. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. IcrediBB does not adequately filter script code from forum message form fields...
IcrediBB 1.1 - Script Injection
IcrediBB 1.1 - Script Injection source: https://www.securityfocus.com/bid/4548/info IcrediBB is freely available web forum software. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. IcrediBB does not adequately filter script code...
Security holes : D-Book, CBook, IcrediBB
Product 1 : D-Book http://www.smartbb.net Versions : 1.4 and less ? Problems : - XSS - Admin access Exploits : - img=javascript:alert27hum27 - Cookie "logged,anyvalue" on admin.php More details in french : http://www.ifrance.com/kitetoua/tuto/D-Book.txt translated by Google :...