CVE-2006-1713

CVE-2006-1713: Cross-site scripting (XSS) in phpMyForum 4.0 (index.php) allows remote attackers to inject arbitrary script/HTML via the page parameter. Affected software: phpMyForum 4.0. Root cause: input in the page parameter is not properly sanitized before output. Impact is web-script injectio...

CVE-2006-1713: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1714: Undefined Security Weakness

CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter...

phpMyForum Cross Site Scripting & CRLF injection

Title : phpMyForum Cross Site Scripting & CRLF injection Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.phpmyforum.de Version: 4.0 Examples: http://target/path/index.php?page=xsscode&type=text2Fcss http://target/path/index.php?template=css&type=someurl0d0aSet-Cookie3Aheader...

PHPMyForum 4.0 - index.php?type CRLF Injection

PHPMyForum 4.0 - index.php?type CRLF Injection source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

PHPMyForum 4.0 - page Cross-Site Scripting

PHPMyForum 4.0 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issue...

PHPMyForum 4.0 - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

PHPMyForum 4.0 - 'index.php?type' CRLF Injection

source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...