EV0063.txt

New eVuln Advisory: PHP Event Calendar XSS & User's Data Corruption Vulnerabilities http://evuln.com/vulns/63/summary.html --------------------Summary---------------- eVuln ID: EV0063 CVE: CVE-2006-0657 Vendor: Softcomplex Vendor's Web Site: http://www.softcomplex.com/ Software: PHP Event Calenda...

[eVuln] phphg Guestbook Multiple Vulnerabilities

New eVuln Advisory: phphg Guestbook Multiple Vulnerabilities http://evuln.com/vulns/58/summary.html --------------------Summary---------------- eVuln ID: EV0058 CVE: CVE-2006-0602 CVE-2006-0603 CVE-2006-0604 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phphg...

UebiMiauXSS.txt

I.Vulnerability UebiMiau Webmail System Cross Site Scripting Vulnerability II.Vendor Aldoir Ventura III.Affected Systems UebiMiau 2.7.9 latest release and probably previous versions. IV.About UebiMiau is a simple, yet efficient mail reader webmail supporting both IMAP and POP3 without dependence ...

MyBB-search.txt

http://127.0.0.1/mybb/search.php?action=dosearch&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="alertdocument.cookie&sorder=1&showresults=threads&submit=Search --------------------Summary---------------- Software: MyBB Sowtware'...

Note-A-Day-2.1.txt

New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...

[eVuln] miniBloggie Authentication Bypass

New eVuln Advisory: miniBloggie Authentication Bypass http://evuln.com/vulns/47/summary.html --------------------Summary---------------- Vendor: myWebland Vendor's Web Site: http://mywebland.neopages.net/ Software: miniBloggie Versions: 1.0 Critical Level: Moderate Type: SQL Injection Class: Remo...

[eVuln] Note-A-Day Weblog Sensitive Information Disclosure

New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...

[eVuln] CaLogic Calendars Multiple XSS Vulnerabilities

New eVuln Advisory: CaLogic Calendars Multiple XSS Vulnerabilities http://evuln.com/vulns/24/summary/bt/ --------------------Summary---------------- Software: CaLogic Calendars Sowtware's Web Site: http://www.calogic.de/ Versions: 1.2.2 Critical Level: Moderate Type: Cross-Site Scripting Class:...

[eVuln] TinyPHPForum Multiple Vulnerabilities

New eVuln Advisory: TinyPHPForum Multiple Vulnerabilities --------------------Summary---------------- Software: TinyPHPForum Sowtware's Web Site: http://www.ralpharama.co.uk/tpf/ Versions: 3.6 and earlier Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched...

EV0006.txt

New eVuln Advisory: phpBook PHP Code Execution --------------------Summary---------------- Software: phpBook http://sourceforge.net/projects/phpbook/ Versions: 1.3.2 and earlier Critical Level: Dangerous Type: PHP Code Execution Class: Remote Status: Unpatched Exploit: Available Solution: Not...

kapda-phpp.txt

KAPDA New advisory Vendor: http://www.php-post.co.uk/ Vulnerable Version: v1.0 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- PHPP is a free message board powered by PHP and MySQL. Vulnerability: -------------------- HTML Injection: The software do...

kapda-12.txt

KAPDA::12 - ekinboard XSS and HTML Injection KAPDA New advisory Vendor: http://www.ekinboard.com Vulnerable Version: 1.0.3 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- ekinboard is an open source forum software designed and programmed by...

EZsite Forum Discloses Passwords to Remote Users

The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the 'Database/EZsiteForum.mdb' file. A remote user can reportedly download this database. OpenVAS Vulnerability Test $Id: EZsiteForum.nasl 6703 2017-07-12 13:57:25Z...

WoltlabSQL.txt

Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...

Denial of service vulnerability in X-Chat for Windows from Silverex.org

Critical Security research group found a denial of service vulnerability in X-Chat for Windows from Silverex.org. Vulnerable versions: 2.4.5-1 and prior. Vulnerable code: define MAXLINE 300 for x = 2; wordx0 != '0'; ++x strncatinfo, wordx, MAXLINE; strncatinfo, " ", MAXLINE; Proof of concept: Pla...

mybbXSS.txt

XSS VULN IN ALL MYBB VERSIONS INCLUDING PR2 Vendor: given SEVEN days notice, no patch released! Just to say, I am apalled with the fact that I contacted MyBB on the 30 August, and was originally not planning to go public. However, because they have failed to release a patch I have decided to aler...

woltlab233.txt

Woltlab Burning Board = 2.2.2/2.3.3 modcp.php SQL injection Discovered by R Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.3 Type: SQL-injection Description: -------------------------------- The WoltLab Burning Board is a high customisable board software for every kind of use. SQL...

phpBBkbmod.txt

phpBB - Knowledge Base MOD SQL-Injection vulnerability and Full Path Disclosure Discovered by R and deluxe89 Discussion: The phpbb - Knowledge Base MOD has a relatively hard to exploit SQL-Injection vulnerability. However, an attacker can exploit this bug and receive informations from the databas...

PT-2005-2672 · Postnuke · Postnuke

Name of the Vulnerable Software and Affected Versions: PostNuke versions 0.750 through 0.760RC3 Description: The issue allows remote attackers to obtain sensitive information via a direct request to "simple smarty.php", which reveals the path in an error message. Recommendations: For PostNuke...

Darryl Burgdorf Webhints Remote Command Execution Vulnerability

Description Darryl Burgdorf Webhints is prone to a remote command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Technologies Affected Colored Scripts Easy Message Board Darryl Burgdorf Webhints 1.3.0 Recommendations Block...