EUVD-2005-0651

Malware in sbrugna...

EUVD-2005-0652

Malware in sbrugna...

ProjectBB 0.4.5 .1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12710/info ProjectBB is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to the application failing to properly sanitize user-supplied input before using it in SQL queries. Successful...

ProjectBB 0.4.5 .1 - Multiple Remote Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12709/info ProjectBB is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. As a result of these...

CVE-2005-0650

Multiple cross-site scripting XSS vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 the pages parameter to divers.php incorrectly referred to as "drivers.php" by some sources, 2 in the search feature text area, 3 forum name, 4 site name or 5...

CVE-2005-0651

Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via 1 liste or 2 desc parameters to divers.php incorrectly referred to as "drivers.php" by some sources, 3 the search feature text area, 4 post name in the post creation feature, 5...

projectBB0451.txt

Sorry it's in French but i don't have the time to translate... It has been published on SecurityTracker to for people who can't read French. Logiciel: ProjectBB v0.4.5.1 Auteur: Benjilenoob E-mail: [email protected] !-------------------! ! II. XSS ! !-------------------!...

failles dans ProjectBB v0.4.5.1

Sorry it's in French but i don't have the time to translate... It has been published on SecurityTracker to for people who can't read French. Logiciel: ProjectBB v0.4.5.1 Auteur: Benjilenoob E-mail: [email protected] !-------------------! ! II. XSS ! !-------------------!...

CVE-2005-0650

Multiple cross-site scripting XSS vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via 1 the pages parameter to divers.php incorrectly referred to as "drivers.php" by some sources, 2 in the search feature text area, 3 forum name, 4 site name or 5...

CVE-2005-0650

CVE-2005-0650 : Multiple cross-site scripting vulnerabilities in ProjectBB 0.4.5.1 allow remote injection of arbitrary script/HTML. Affected vectors include (1) the pages parameter to divers.php, (2) the search feature text area, (3) forum name, (4) site name, or (5) the maximum avatar size in th...

CVE-2005-0651

CVE-2005-0651 describes multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1, allowing remote attackers to execute arbitrary SQL commands. The affected components include divers.php parameters (liste/desc), the search text area, post names in post creation, and several profile fields (City...

CVE-2005-0651

Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via 1 liste or 2 desc parameters to divers.php incorrectly referred to as "drivers.php" by some sources, 3 the search feature text area, 4 post name in the post creation feature, 5...