EUVD-2006-5116

Malware in sbrugna...

EUVD-2008-0785

Malware in sbrugna...

EUVD-2018-17740

Malware in sbrugna...

Code injection

The component /php-fusion/infusions/shoutboxpanel/shoutboxarchive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel...

Cross site scripting

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

Webfroot Shoutbox 2.32 - Remote Command Execution

source: https://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can exploit this vulnerability to execute arbitrary...

CVE-2002-1429

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...

CVE-2002-1429

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...

[SCSA-003] Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan

.: Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan :. Security Corporation Security Advisory SCSA-003 PROGRAM: Nuked-Klan HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: beta 1.2 and prior DESCRIPTION Nuked Klan is a PHP Gateway for "clans". direct quote fr...

Code injection Vulnerability in endity.com's shoutBOX

Overview ----------------------- A shoutbox is a fun tool webmasters put on their site that allows them to receive feedback from users quickly. By typing in their name, site URL, & message, users can post comments, suggestions, praises, flames, etc. onto the shoutbox and it will be seen by everyo...

ShoutBox 1.2 - 'Form' HTML Injection

source: https://www.securityfocus.com/bid/5354/info shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in...