36 matches found
CVE-2008-2131
Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...
CVE-2008-2131
CVE-2008-2131 is an XSS vulnerability in mvnForum 1.1 GA. The issue allows remote authenticated users to inject arbitrary script/HTML via the topic field, which is echoed in user/viewthread.jsp when using the quick reply button. The vulnerability is documented across multiple sources (NVD and CVE...
mvnForum 1.1 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 mvnForum Cross Site Scripting Vulnerability Original release date: 2008-04-27 Last revised: 2008-05-06 Latest version: http://users.own-hero.net/decoder/advisories/mvnforum-jsxss.txt Source: Christian Holler http://users.own-hero.net/decoder/ Systems...
mvnforum-jsxss.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 mvnForum Cross Site Scripting Vulnerability Original release date: 2008-04-27 Last revised: 2008-05-06 Latest version: http://users.own-hero.net/decoder/advisories/mvnforum-jsxss.txt Source: Christian Holler Systems Affected: mvnForum 1.1...
CVE-2006-3245
Multiple cross-site scripting XSS vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 member and 2 activatecode parameters...
CVE-2006-3245
Affected software: mvnForum 1.0 GA and earlier. Vulnerability: multiple cross-site scripting (XSS) via the activatecode and member parameters of the activatemember script. Root cause/impact: input is not sanitized before dynamic content is generated, enabling arbitrary HTML/JavaScript execution i...
CVE-2006-3245
Multiple cross-site scripting XSS vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 member and 2 activatecode parameters...
mvnForum activatemember Multiple Parameter XSS
The remote host is running mvnForum, an open source, forum application based on Java J2EE. The version of mvnForum installed on the remote host fails to sanitize user-supplied input to the 'activatecode' and 'member' parameters of the 'activatemember' script before using it to generate dynamic we...
MVNForum Activatemember 1.0 - Cross-Site Scripting
MVNForum Activatemember 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
MVNForum Activatemember 1.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of a...
MVNForum Search Cross-Site Scripting Vulnerability
The version of mvnForum installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are...
mvnForum Search Parameter XSS
The version of mvnForum installed on the remote host is prone to a cross-site scripting attack due to its failure to sanitize user- supplied input to the search field. %NASLMINLEVEL 70300 This script was written by Josh Zlatin-Amishav This script is released under the GNU GPLv2 Fixed by Tenable: ...
CVE-2005-1183
Cross-site scripting XSS vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter...
CVE-2005-1183
CVE-2005-1183 affects mvnForum 1.0 RC4 and is a cross-site scripting (XSS) vulnerability due to failure to sanitize user-supplied input in the Search field. The issue enables remote injection of arbitrary script/HTML via the search parameter, as described by multiple sources (OpenVAS NASL notes i...