EUVD-2005-0570

Malware in sbrugna...

EUVD-2008-5412

Malware in sbrugna...

Punbb 1.3.4 - Multiple Full Path Disclosure Vulnerability

No description provided by source. Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in the file...

Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

CVE-2008-5435

CVE-2008-5435 concerns an XSS vulnerability in PunBB, exposed in moderate.php for PunBB versions prior to 1.3.1. The issue allows remote attackers to inject arbitrary web script or HTML via a topic subject, potentially impacting integrity (partial) and not confidentiality or availability, per the...

CVE-2008-5435: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-3336: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 include/parser.php and 2 moderate.php...

CVE-2008-1485: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the gethost parameter to moderate.php...

Code injection

Invision Power Board IPB before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving 1 the posticon variable in classes/post/classpost.php and 2 the df value in actionpublic/moderate.php...

CVE-2006-0218: Undefined Security Weakness

Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0.2 have unspecified impact and attack vectors, related to 1 admin/moderate.php, 2 admin/themes.php, 3 inc/functions.php, 4 inc/functionsupload.php, 5 printthread.php, and 6 usercp.php, and probably related to SQL injection...

advisory003.txt

============================================== SQL Injections in punbb-1.2.1 moderate.php ============================================== Description ----------- Improper handling of several arguments in moderate.php allows a malicious moderator or admin to inject arbitrary SQL statements. This al...

CVE-2005-0569: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 language parameter to register.php, 2 change email feature in profile.php, 3 posts or 4 topics parameter to moderate.php...