532 matches found
PT-2007-2219 · Phorum · Phorum
Name of the Vulnerable Software and Affected Versions: Phorum version 5.1.18 Description: A cross-site scripting XSS issue in the register.php file allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vendor disputes this issue, stating that characters are...
CVE-2006-6968: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0769: Undefined Security Weakness
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
Phorum HTML Injection Vulnerability
Phorum HTML Injection Vulnerability Phorum is a web based message board written in PHP. Phorum is designed with high-availability and visitor ease of use in mind. Features such as mailing list integration, easy customization and simple installation make Phorum a powerful add-in to any website...
Phorum < 5.1.19 register.php XSS
Binary data 3898.prm...
CVE-2006-6550
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...
CVE-2006-6550
CVE-2006-6550 affects Phorum 3.2.11 and earlier, describing a PHP remote file inclusion vulnerability in common.php that could allow an attacker to execute arbitrary PHP code via a URL in the db_file parameter. The CVE entry notes a dispute about the vulnerability because db_file is defined befor...
CVE-2006-6550: Undefined Security Weakness
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...
PT-2006-7153 · Phorum · Phorum
Name of the Vulnerable Software and Affected Versions: Phorum versions 3.2.11 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the db file parameter. Recommendations: For Phorum versions 3.2.11 and earlier, at the moment, there is ...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
Phorum 3.2.11 - common.php Remote File Inclusion
Phorum 3.2.11 - common.php Remote File Inclusion =========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Phorum // $dbfile = './db/postgresql65.php'; Exploit: http://localhost/paTh/common.php?dbfile=Ev!lScript =========================================================== By: Mr-m07...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
Phorum 3.2.11 - 'common.php' Remote File Inclusion
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
phorum5114local.txt
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
Cross-Site Scripting and Local File Inclusion in Phorum
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
Phorum 5.1.14 XSS SQL injection Vulnerability
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...
CVE-2006-3612
Cross-site scripting XSS vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...
phorum5114.txt
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...