LEMON-S PHP Simple Oekaki BBS Arbitrary File Deletion Vulnerability

LEMON-S PHP Simple Oekaki BBS is a PHP-based electronic bulletin board BBS script. A security vulnerability exists in the index.php script of LEMON-S PHP Simple Oekaki BBS versions prior to 1.21. A remote attacker can exploit the vulnerability to delete arbitrary files with the help of the...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

PT-2015-6017

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue allows remote attackers to delete arbitrary files. This is achieved via the oekakis parameter in the "index.php" file. Recommendations For versions prior to 1.21, updat...

PT-2015-6016

Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter in t...

CVE-2015-2969: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...

CVE-2015-2970: Improper Limitation of a Pathname to a Restricted Directory

index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...