Cross site scripting

Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...

CVE-2007-1902

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...

CVE-2007-1903

Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...

Sql injection

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...

CVE-2007-1901

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...

CVE-2007-1903

SonicBB 1.0 is affected by CVE-2007-1903: a cross-site scripting (XSS) vulnerability in search.php via the part parameter. The issue allows remote attackers to inject arbitrary script/HTML; exploitation details indicate it can be triggered when PHP magic_quotes_gpc is Off. The advisory references...

CVE-2007-1902

SonicBB 1.0 is affected by multiple SQL injection vulnerabilities (CVE-2007-1902). The flaws allow remote attackers to run arbitrary SQL via search.php (parameters part and by) and viewforum.php (id). The public reports describe exploitation can occur when magic_quotes_gpc is Off, enabling attack...

CVE-2007-1903

Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...

CVE-2007-1902

Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...

CVE-2007-1901

SonicBB 1.0 is affected by CVE-2007-1901. The vulnerability stems from error messages generated by search.php (parameter by[]), viewforum.php (p[]), and viewforum.php/members.php (id), which publicly disclose the server installation path. Impact is information disclosure (partial confidentiality)...

CVE-2007-1901

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...

SonicBB 1.0 - search.php Cross-Site Scripting

SonicBB 1.0 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23963/info SonicBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

[Full-disclosure] SonicBB version 1.0 XSS Attack Vulnerabilities

netVigilance Security Advisory 20 SonicBB version 1.0 XSS Attack Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the ideal community...

[Full-disclosure] SonicBB version 1.0 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 19 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the idea...

[Full-disclosure] SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 18 SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the...

SonicBB 1.0 - Multiple SQL Injections

SonicBB 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

SonicBB 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

SonicBB 1.0 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23963/info SonicBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...