124 matches found
[SECURITY] [DSA 768-1] New phpbb2 packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 768-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...
DSA-768-1 phpbb2 - missing input validation
Bulletin has no description...
phpBB2 Plus <= 1.52 Multiple XSS
The remote host is running a version of phpBB2 Plus that suffers from multiple cross-site scripting flaws due to a general failure of the application and associated modules to sanitize user-supplied input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
PHPBB2 Plus 1.5 - Portal.php Multiple Cross-Site Scripting Vulnerabilities
PHPBB2 Plus 1.5 - Portal.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13151/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...
PHPBB2 Plus 1.5 - 'Portal.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/13151/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute...
PHPBB2 Plus 1.5 - viewtopic.php Cross-Site Scripting
PHPBB2 Plus 1.5 - viewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13153/info phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...
PHPBB2 Plus 1.5 - 'GroupCP.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13149/info phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...
PHPBB2 Plus 1.5 - GroupCP.php Cross-Site Scripting
PHPBB2 Plus 1.5 - GroupCP.php Cross-Site Scripting source: https://www.securityfocus.com/bid/13149/info phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...
PHPBB2 Plus 1.5 - index.php Multiple Cross-Site Scripting Vulnerabilities
PHPBB2 Plus 1.5 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13150/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...
PHPBB2 < 2.0.14 Multiple Vulnerabilities
Binary data 2820.prm...
PHPBB2 Plus 1.5 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/13150/info phpBB2 Plus is affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute...
PHPBB2 Plus 1.5 - 'viewtopic.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13153/info phpBB2 Plus is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...
phphpbb2 + php version < 4.3.10 unserialize() memory dump sql password from config.php exploit
php bug in ext/standart/varunserializer.c in php 4.3.10 for dump php heap memory with phpbb2 ,who use unserialize for cookie , and found the config.phpsql password in the heap. you need http://overdose.tcpteam.org/serv.h and http://overdose.tcpteam.org/serv.cpp for compile / coded by overdose...
CVE-2002-0473
CVE-2002-0473 : The vulnerability affects db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier. The phpbb_root_path parameter enables remote attackers to execute arbitrary code from remote servers. This is a remote code execution issue in phpBB2 prior to the fixed version; no exploit details are pro...
PHPBB2 - Page_Header.php SQL Injection
PHPBB2 - PageHeader.php SQL Injection source: https://www.securityfocus.com/bid/6888/info A SQL injection vulnerability has been reported in phpBB2. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may...
PHPBB2 - 'Page_Header.php' SQL Injection
source: https://www.securityfocus.com/bid/6888/info A SQL injection vulnerability has been reported in phpBB2. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may supply malicious parameters to manipulat...
phpBB 2.0.3 - privmsg.php SQL Injection
phpBB 2.0.3 - privmsg.php SQL Injection source: https://www.securityfocus.com/bid/6634/info A SQL injection vulnerability has been reported for phpBB2 systems that may result in the deletion of all private messages. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which i...
phpBB2 Showing users ip adresses
phpBB2 Showing users ip adresses -------------------------------------------- Affected Program: phpBB2 version 2.0.0, 2.0.1, 2.0.3 possibly earlier versions too, but not tested Vendor: http://www.phpbb.com Vendor Status: not informed yet Discovery Date: 9 oct 2002 Severity -------- All users can...
phpBB2 Gender Mod 1.1.3 - SQL Injection
phpBB2 Gender Mod 1.1.3 - SQL Injection source: https://www.securityfocus.com/bid/5342/info phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating...
phpBB2 Gender Mod 1.1.3 - SQL Injection
source: https://www.securityfocus.com/bid/5342/info phpBB2 is an open-source web forum application that is written in PHP and backended by a number of database products. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Gender Mod is a modification for...