EUVD-2008-5376

Malware in sbrugna...

EUVD-2005-1186

Malware in sbrugna...

EUVD-2008-5377

Malware in sbrugna...

EUVD-2006-3242

Malware in sbrugna...

EUVD-2008-2128

Malware in sbrugna...

MVNForum Activatemember 1.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

MVNForum 1.0 Search Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13213/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

CVE-2008-5400

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

CVE-2008-5399

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

Cross site scripting

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5399

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5400

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

CVE-2008-5399

The vulnerability CVE-2008-5399 affects mvnForum via the listonlineusers ("Who's online") component. Public sources describe a cross-site scripting (XSS) flaw in mvnForum before version 1.2.1 GA that lets remote attackers inject arbitrary web script or HTML through unspecified parameters. The kno...

CVE-2008-5400

CVE-2008-5400 describes multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum up to version 1.2.1 GA, allowing remote attackers to perform admin actions (e.g., create forums, change/enable/disable accounts) via unspecified vectors, possibly related to HTTP Referer headers. Affect...

PT-2008-6516 · Mvnforum · Mvnforum

Name of the Vulnerable Software and Affected Versions: mvnForum versions prior to 1.2.1 GA Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters in the listonlineusers component. Recommendations: For...

PT-2008-6517 · Mvnforum · Mvnforum

Name of the Vulnerable Software and Affected Versions: mvnForum versions prior to 1.2.1 GA Description: The issue allows remote attackers to perform various actions as a product administrator, including creating forums, changing account privileges, enabling accounts, or disabling accounts. This i...

[Full-disclosure] [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM

MULTI SECURITY VULNERABILITIES IN MVNFORUM 1. General Information mvnForum is software used for creating forums on the Internet http://www.mvnforum.com. This is an open source software making use of Java J2EE ISP/Servlet technology. On September 6 2008, SVRT-Bkis found several CSRF and XSS...

CVE-2008-2131

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...

Cross site scripting

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...