38 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...
CVE-2007-1902
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...
CVE-2007-1901
SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...
Design/Logic Flaw
SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...
CVE-2007-1903
Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...
CVE-2007-1901
SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...
CVE-2007-1903
Cross-site scripting XSS vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the part parameter...
CVE-2007-1903
SonicBB 1.0 is affected by CVE-2007-1903: a cross-site scripting (XSS) vulnerability in search.php via the part parameter. The issue allows remote attackers to inject arbitrary script/HTML; exploitation details indicate it can be triggered when PHP magic_quotes_gpc is Off. The advisory references...
CVE-2007-1901
SonicBB 1.0 is affected by CVE-2007-1901. The vulnerability stems from error messages generated by search.php (parameter by[]), viewforum.php (p[]), and viewforum.php/members.php (id), which publicly disclose the server installation path. Impact is information disclosure (partial confidentiality)...
CVE-2007-1902
SonicBB 1.0 is affected by multiple SQL injection vulnerabilities (CVE-2007-1902). The flaws allow remote attackers to run arbitrary SQL via search.php (parameters part and by) and viewforum.php (id). The public reports describe exploitation can occur when magic_quotes_gpc is Off, enabling attack...
CVE-2007-1902
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 part and 2 by parameters to a search.php, or the 2 id parameter to b viewforum.php...
SonicBB 1.0 - 'search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23963/info SonicBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
[Full-disclosure] SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 18 SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the...
[Full-disclosure] SonicBB version 1.0 Multiple SQL Injection Vulnerabilities
netVigilance Security Advisory 19 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the idea...
SonicBB 1.0 - search.php Cross-Site Scripting
SonicBB 1.0 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23963/info SonicBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...
SonicBB 1.0 - Multiple SQL Injections
SonicBB 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
[Full-disclosure] SonicBB version 1.0 XSS Attack Vulnerabilities
netVigilance Security Advisory 20 SonicBB version 1.0 XSS Attack Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the ideal community...
SonicBB 1.0 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/23964/info SonicBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...