5 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...
PT-2015-6016
Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter in t...
PT-2015-6017
Name of the Vulnerable Software and Affected Versions LEMON-S PHP Simple Oekaki BBS versions prior to 1.21 Description The issue allows remote attackers to delete arbitrary files. This is achieved via the oekakis parameter in the "index.php" file. Recommendations For versions prior to 1.21, updat...
CVE-2015-2970: Improper Limitation of a Pathname to a Restricted Directory
index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to delete arbitrary files via the oekakis parameter...
CVE-2015-2969: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Simple Oekaki BBS before 1.21 allows remote attackers to inject arbitrary web script or HTML via the oekakis parameter...