CVE-2005-0651

Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via 1 liste or 2 desc parameters to divers.php incorrectly referred to as "drivers.php" by some sources, 3 the search feature text area, 4 post name in the post creation feature, 5...

ubbthreads

Не проверял на наличие сообщений о подобной ошибке где либо Вставка javascript в аватор: javascript:alert'На этом форуме есть баги!!!!'.jpg javascript:open'http://forum.com/admin/dograntmod.php?Cat=& NewMod=2644','Give', 'width=1, height=1'.jpg при просмотре сообщения администратором даёт юзеру...

Security holes in OpenBB

Product : OpenBB http://www.prolixmedia.com Versions : 1.0.0 RC3 and less ? Problems : - XSS - Access to moderators' options Exploits : - /myhome.php?action=messages&box=form20name=ainput 20name=i20value=XSS/formscriptalert document.a.i.value/script - imghttp://" onerror="SCRIPT"/img - glow...

OpenBB 1.0 - Unauthorized Moderator Access

OpenBB 1.0 - Unauthorized Moderator Access source: https://www.securityfocus.com/bid/4823/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reported to be vulnerable to a condition that will...

OpenBB 1.0 - Unauthorized Moderator Access

source: https://www.securityfocus.com/bid/4823/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reported to be vulnerable to a condition that will allow an unauthorized user to gain moderat...