phpnukesplat-lfi.txt

!/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork: "Splatt Forum" Discovered & Coded ...

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

CVE-2005-3282

CVE-2005-3282 affects Splatt Forum 3.0 to 3.2. The vulnerability allows remote attackers to bypass authentication via unknown vectors, with a CVSS v2 base score of 7.5 (HIGH) and network access/low complexity in the provided data. Affected component is the Splatt Forum authentication mechanism; r...

CVE-2005-3282

Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors...

CVE-2003-1547

Cross-site scripting XSS vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter...

CVE-2003-0590

Cross-site scripting XSS vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon imagesubject field...

Splatt Forum 34 - Post Icon HTML Injection

Splatt Forum 34 - Post Icon HTML Injection source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML...

Splatt Forum 3/4 - Post Icon HTML Injection

source: https://www.securityfocus.com/bid/8198/info Splatt Forum has been reported prone to a HTML injection vulnerability. An attacker may save a Splatt Forum post form, and modify it so that the post icon value contains arbitrary attacker supplied HTML code. As a result, a malicious user may ha...

Multiple Vulnerabilities in Splatt Forum 4.0

=========================================================================== ==== FRAME4 SECURITY ADVISORY FSA-2003:001 --------------------------------------------------------------------------- ---- PRODUCT : Splatt Forum 4.0 for PHP-Nuke 6.0 PRODUCT/VENDOR URL : http://www.splatt.it/ TYPE :...

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Splatt Forum 'Search' function. As a result of this...

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting

PHP-Nuke Splatt Forum 4.0 Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/7483/info Splatt Forum is a public message board plugin designed to be used with PHPNuke. It has been reported that Splatt Forum does not sufficiently filter user supplied URI parameters for the Spla...

PHP-Nuke Splatt Forum 4.0 Module - HTML Injection

PHP-Nuke Splatt Forum 4.0 Module - HTML Injection source: https://www.securityfocus.com/bid/7484/info A problem with Splatt Forum could allow remote users to execute arbitrary code in the context of the web site running the Splatt Forum module. The problem occurs due to the lack of sanitization...

PHP-Nuke block-Forums.php subject vulnerabilities

The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the...

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the information gathered in this manner to mount further...

CVE-2002-0959

Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an img tag with a closing quote followed by the script...

CVE-2002-0959

Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an img tag with a closing quote followed by the script...

CVE-2002-0959

The CVE-2002-0959 entry refers to a Cross-site scripting vulnerability in Splatt Forum 3.0. The issue allows remote attackers to execute arbitrary script as other users by abusing an tag with a closing quote followed by malicious script. According to the NVD entry, the vulnerability has a base s...

Splatt Forum XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerable systems: Splatt Forum 3.0 Immune systems: Splatt Forum 3.1 Splatt forum uses a user provided string through the IMG tag in the following HTML tag: img src="$userprovided" border="0" / While there is a check to force the string to begin with...

Splatt Forum 3.0 - Image Tag HTML Injection

source: https://www.securityfocus.com/bid/4953/info Splatt Forum does not filter HTML from image tags. This may allow an attacker to inject arbitrary script code in forum messages. Injected script code will be executed in the browser of an arbitrary web user who views the malicious forum message,...