EUVD-2006-3242

Malware in sbrugna...

EUVD-2005-1186

Malware in sbrugna...

EUVD-2008-5376

Malware in sbrugna...

EUVD-2008-5377

Malware in sbrugna...

EUVD-2008-2128

Malware in sbrugna...

MVNForum 1.0 Search Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13213/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

MVNForum Activatemember 1.0 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

CVE-2008-5399

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5400

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

Cross site scripting

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5399

Cross-site scripting XSS vulnerability in the listonlineusers aka "Who's online" component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2008-5400

CVE-2008-5400 describes multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum up to version 1.2.1 GA, allowing remote attackers to perform admin actions (e.g., create forums, change/enable/disable accounts) via unspecified vectors, possibly related to HTTP Referer headers. Affect...

CVE-2008-5400

Multiple cross-site request forgery CSRF vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to 1 create forums, 2 change account privileges, 3 enable accounts, or 4 disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers...

CVE-2008-5399

The vulnerability CVE-2008-5399 affects mvnForum via the listonlineusers ("Who's online") component. Public sources describe a cross-site scripting (XSS) flaw in mvnForum before version 1.2.1 GA that lets remote attackers inject arbitrary web script or HTML through unspecified parameters. The kno...

PT-2008-6517 · Mvnforum · Mvnforum

Name of the Vulnerable Software and Affected Versions: mvnForum versions prior to 1.2.1 GA Description: The issue allows remote attackers to perform various actions as a product administrator, including creating forums, changing account privileges, enabling accounts, or disabling accounts. This i...

PT-2008-6516 · Mvnforum · Mvnforum

Name of the Vulnerable Software and Affected Versions: mvnForum versions prior to 1.2.1 GA Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters in the listonlineusers component. Recommendations: For...

[Full-disclosure] [SVRT-06-08] MULTI SECURITY VULNERABILITIES IN MVNFORUM

MULTI SECURITY VULNERABILITIES IN MVNFORUM 1. General Information mvnForum is software used for creating forums on the Internet http://www.mvnforum.com. This is an open source software making use of Java J2EE ISP/Servlet technology. On September 6 2008, SVRT-Bkis found several CSRF and XSS...

CVE-2008-2131

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...

Cross site scripting

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...