6 matches found
EUVD-2007-5539
Malware in sbrugna...
CVE-2007-5564
Multiple cross-site scripting XSS vulnerabilities in NSSboard formerly Simple PHP Forum 6.1 allow remote attackers to inject arbitrary web script or HTML via 1 HTML tags when BBcode is disabled; or the 2 user, 3 email, or 4 Real Name fields in a profile...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in NSSboard formerly Simple PHP Forum 6.1 allow remote attackers to inject arbitrary web script or HTML via 1 HTML tags when BBcode is disabled; or the 2 user, 3 email, or 4 Real Name fields in a profile...
CVE-2007-5564
NSSboard (formerly Simple PHP Forum) 6.1 is affected by multiple XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via (1) HTML tags when BBCode is disabled; or (2) the user, (3) email, or (4) Real Name fields in a profile. The connected documents confirm the ...
CVE-2007-5564
Multiple cross-site scripting XSS vulnerabilities in NSSboard formerly Simple PHP Forum 6.1 allow remote attackers to inject arbitrary web script or HTML via 1 HTML tags when BBcode is disabled; or the 2 user, 3 email, or 4 Real Name fields in a profile...
HTML Injection Vuln in nssboard
Nssboard, formerly Simple PHP forum, is vulnerable to HTML injection including scripts possible XSS in two ways: 1. If BBcode is disabled, HTML tags are no longer stripped, allowing XSS attacks, etc. 2. Profile information user, email, Real Name is not filtered. For example a user could use...