PHP-Fusion 6.0.106 - BBCode IMG Tag Script Injection

/ ahh I was hoping for some socket code : /str0ke Dark Assassins - http://dark-assassins.com/ Visit us on IRC @ irc.tddirc.net DarkAssassins PHP-Fusion img/img exploit Discovered/Coded by Easyex Using the img /img codes we can get an administrator to do a function a normal member cannot do. For...

CVE-2005-2276

Cross-site scripting XSS vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI e.g. "j&X41vascript" in an IMG tag...

GroupWise WebAccess < 6.5 SP5 EMail IMG SRC XSS

Binary data 3087.prm...

CVE-2002-2086

Multiple cross-site scripting XSS vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via 1 "script" in unspecified input fields or 2 a javascript: URL in the src attribute of an IMG tag...

CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

CVE-2002-1807

The CVE-2002-1807 entry describes a Cross-site Scripting (XSS) vulnerability in phpWebSite version 0.8.3 that allows remote attackers to inject arbitrary web script or HTML through Javascript in an IMG tag. The affected software is phpWebSite 0.8.3; the underlying cause is an XSS flaw in handling...

CVE-2002-1807

Cross-site scripting XSS vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1806

CVE-2002-1806 is an XSS vulnerability in Drupal 4.0.0 . Connected sources repeatedly describe a vulnerability that allows remote attackers to inject arbitrary web script or HTML via a Javascript payload in an IMG tag. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with impact on integri...

CVE-2002-1804

Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1804

The CVE-2002-1804 entry documents a Cross-site scripting (XSS) vulnerability in NPDS 4.8, allowing remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. Affected component: NPDS 4.8 frontend rendering of IMG tags; root cause is improper handling/escaping of inline ...

CVE-2002-1805

Cross-site scripting XSS vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1803

Cross-site scripting XSS vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1808

Cross-site scripting XSS vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic...

CVE-2002-1806

Cross-site scripting XSS vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...

CVE-2002-1802

Cross-site scripting XSS vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

CVE-2005-0563

Cross-site scripting XSS vulnerability in Microsoft Outlook Web Access OWA component in Exchange Server 5.5 allows remote attackers to inject arbitrary web script or HTML via an email message with an encoded javascript: URL "jav&X41script:" in an IMG tag...

CVE-2004-2015

CVE-2004-2015 is an XSS vulnerability in WebCT Campus Edition. The issue allows remote attackers to inject arbitrary HTML or web script through iframe, img, or object tags. The available documents confirm the affected product and the vulnerable vectors but do not specify root cause details beyond...

CVE-2004-1842

PHP-Nuke 6.x through 7.1.0 is affected by a CSRF that lets an attacker gain administrative privileges via an image tag pointing to admin.php. The PT-2004-2741 entry confirms the issue and recommends upgrading to a version containing the fix; no specific fixed version is provided in the sources.