IdealBB Multiple Vulnerabilities (XSS, SQLi, more)

The remote host is running IdealBB, a web-based bulletin board written in ASP. The remote version of this software has multiple flaws - SQL injection, cross-site scripting and HTTP response splitting vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

IdealBB 1.4.9 Beta - HTML Injection

IdealBB 1.4.9 Beta - HTML Injection source: https://www.securityfocus.com/bid/8480/info IdealBB is prone to an HTML injection vulnerability. This could permit remote attackers to inject malicious HTML and script code into board messages. The attacker's code may be rendered in the web browser of t...

IdealBB 1.4.9 Beta - HTML Injection

source: https://www.securityfocus.com/bid/8480/info IdealBB is prone to an HTML injection vulnerability. This could permit remote attackers to inject malicious HTML and script code into board messages. The attacker's code may be rendered in the web browser of the user viewing the malicious messag...

ZH2003-15SA (security advisory): IdealBB XSS Vulnerability

ZH2003-15SA security advisory: IdealBB XSS Vulnerability Published: 7 august 2003 Released: 7 august 2003 Name: IdealBB Affected Systems: 1.4.9 beta Issue: Remote attackers can inject XSS script Author: [email protected] Vendor: http://www.idealbb.com Description Zone-h Security Team has...

IdealBB 1.4.9 - error.asp Cross-Site Scripting

IdealBB 1.4.9 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp...

IdealBB 1.4.9 - 'error.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8360/info IdealBB error.asp page has been reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the error.asp script on user-influenced URI parameters. This...