CVE-2005-4138: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the 1 Wohnort and 2 Beruf fields in editprofile.php, 3 user parameter array in vprofile.php, and 4 the action parameter in misc.php...

CVE-2005-4139: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in calendar.php, 2 user parameter array in vprofile.php, and 3 the userid parameter in misc.php...

CVE-2005-2989: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter to topic.php, the uid parameter to 2 misc.php or 3 pm.php, or the fid parameter to 3 forums.php or 4 newpost.php...

DeluxeBB 1.0 - misc.php SQL Injection

DeluxeBB 1.0 - misc.php SQL Injection source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a...

CVE-2005-2888: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the 1 fid parameter to misc.php or 2 Content-Disposition field in the HTTP header to newreply.php...

MyBBPR2.txt

Hello .. The Injected File : misc.php , newreply.php Discovered by: Devil-00 Injected Versions :- MyBB Preview Release 2 misc.php :- CODE http://site/misc.php?action=rules&fid=-1' SQL /CODE newreply.php :- CODE Do Preview By FireFox And Edit Header ; Content-Disposition: form-data; name="icon"\r\...

CVE-2002-1879: Undefined Security Weakness

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the 1 member parameter to member.php or 2 loser parameter to misc.php...

CVE-2005-1832

Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the 1 forums, 2 version, or 3 limit parameter to misc.php, 4 page or 5 datecut parameter to forumdisplay.php, 6 username, 7 email, or 8...

CVE-2005-1832: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the 1 forums, 2 version, or 3 limit parameter to misc.php, 4 page or 5 datecut parameter to forumdisplay.php, 6 username, 7 email, or 8...

CVE-2004-1864: Undefined Security Weakness

SQL injection vulnerability in Extreme Messageboard XMB 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to 1 member.php, 2 misc.php, or 3 today.php...

CVE-2004-1863: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in XMB aka extreme message board 1.9 beta aka Nexus beta allow remote attackers to inject arbitrary web script or HTML via 1 the u2uheader parameter in editprofile.php, the restrict parameter in 2 member.php, 3 misc.php, and 4 today.php, and 5 an...

CVE-2005-0775

CVE-2005-0775 affects PhotoPost PHP 5.0 RC3 where the reportpost action in misc.php fails to limit logging data sent to the administrator, enabling remote attackers to flood the admin with email. The NVD lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no a...

CVE-2005-0775: Undefined Security Weakness

The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator...

CVE-2005-0511: Undefined Security Weakness

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter...

CVE-2004-0323

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the 1 ppp parameter in viewthread.php, 2 desc parameter in misc.php, 3 tpp parameter in forumdisplay.php, 4 ascdesc parameter in forumdisplay.php, or 5 the addon...

CVE-2004-0323: Undefined Security Weakness

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the 1 ppp parameter in viewthread.php, 2 desc parameter in misc.php, 3 tpp parameter in forumdisplay.php, 4 ascdesc parameter in forumdisplay.php, or 5 the addon...