532 matches found
Phorum < 5.2.15 XSS Vulnerability
Phorum is prone to a cross-site scripting XSS vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
CVE-2010-1629
Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...
Cross site scripting
Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...
CVE-2010-1629
Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...
CVE-2010-1629
Affected software: Phorum (PHP-based forum software). Vulnerability: Cross-site scripting (XSS) in Phorum before 5.2.15 that allows remote attackers to inject arbitrary web script or HTML via an invalid email address. Impact (per sources): XSS could affect users viewing manipulated inputs; exact ...
CVE-2010-1629: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Phorum before 5.2.15 allows remote attackers to inject arbitrary web script or HTML via an invalid email address...
Phorum过滤引擎HTML代码注入漏洞
BUGTRAQ: 35777 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的过滤引擎没有充分地验证某些BBcode参数，远程攻击者可以在所提交的请求中使用导致注入并执行恶意JavaScript代码。 Phorum 5.2.11 厂商补丁： Phorum ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phorum.org/phorum5/read.php?64,139411...
Phorum < 5.2.12a Multiple BBCode HTML Injection Vulnerabilities
Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Phorum Multiple BBCode HTML Injection Vulnerabilities
Phorum is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials and...
Phorum : Permanent Cross-Site Scripting Vulnerabilities
//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...
Phorum 5.2.11 Cross Site Scripting
//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...
Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities
No description provided by source. //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and...
Phorum 5.2.11 - Persistent Cross-Site Scripting
//----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and MySQL based Open Source forum...
Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== Phorum Sysdream Testing XSS and span style="font-size: 20px;xss:expressionalertdocument.cook...
Phorum 5.2.11 - Persistent Cross-Site Scripting
Phorum 5.2.11 - Persistent Cross-Site Scripting //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the...
Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities
This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...
Phorum 'image/bmp' MIME Type HTML Injection Vulnerability
According to its version number, the remote version of Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...
Phorum < 5.2.11 HTML Injection Vulnerability
Phorum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Phorum Multiple Cross Site Scripting Vulnerabilities
According to its version number, the remote version of Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based authentication credentials and launch othe...
Phorum <= 5.2.10 Multiple XSS Vulnerabilities
Phorum is prone to multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...