449 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227...
CVE-2006-2724
Cross-site scripting XSS vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227...
CVE-2006-2724
PunBB 1.2.11 has a cross-site scripting (XSS) vulnerability that lets remote authenticated administrators inject arbitrary HTML or script to other administrators via the Admin note feature. The provided sources do not specify exploitation details, affected versions beyond 1.2.11, or a remediation...
CVE-2006-2724
Cross-site scripting XSS vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227...
PunBB 1.2.11 Cross site scripting
/ --------------------------------------------------------------- Neo Security Team NST® Advisory 22 --------------------------------------------------------------- Program : PunBB 1.2.11 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.11 & lower ones Risk: Low! Impact: Indirect cro...
punBB1211.txt
PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...
Cross site scripting
Cross-site scripting XSS vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the reqmessage parameter, because the value of the redirecturl parameter is not sanitized...
CVE-2006-2227
Cross-site scripting XSS vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the reqmessage parameter, because the value of the redirecturl parameter is not sanitized...
CVE-2006-2227
Cross-site scripting XSS vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web script or HTML via the reqmessage parameter, because the value of the redirecturl parameter is not sanitized...
CVE-2006-2227
CVE-2006-2227 describes a cross-site scripting (XSS) vulnerability in PunBB 1.2.11, specifically in misc.php where an attacker can inject arbitrary script or HTML via the req_message parameter because the redirect_url value is not sanitized. The description does not provide exploit details, affec...
PunBB 1.2.11 Cross-Site Scripting
PunBB 1.2.11 Cross-Site Scripting File name :- misc.php Action :- Send Email Line :- 123 php redirect$POST'redirecturl', $langmisc'E-mail sent redirect'; /php The $POST'redirecturl' = Unfilter Input Exploit :- Send POST Request code GET :- /PunBB/misc.php?email=2 POST :-...
Cross site scripting
Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...
CVE-2006-1894
Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...
CVE-2006-1894
Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...
CVE-2006-1894
CVE-2006-1894 affects RevoBoard 1.8 (derived from PunBB). The vulnerability is a cross-site scripting (XSS) flaw in the email address obfuscator: a substitution cipher used for the email tag can be reversed to reveal injected script/HTML, enabling remote code execution in the user’s browser. Affe...
RevoBoard [email] tag XSS
Revoboard php is based on an earlier version of PunBB. I know for sure that this affects v1.8. The email tag parser obsfucates emails to stop harvesters. To execute code, do this: php $code = ''" onMouseover="javascript:alert/xss/"'; for$a=0;$astrlen$code;$a++ $c = ordsubstr$code,$a,1; $c +=...
Cross site scripting
Cross-site scripting XSS vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHPSELF variable is used to handle a punpage tag...
Design/Logic Flaw
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations...
CVE-2006-1089
Cross-site scripting XSS vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHPSELF variable is used to handle a punpage tag...