4 matches found
CVE-2025-50938
Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...
CVE-2025-50938
Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...
CVE-2006-6237
SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...
PT-2005-4077 · Zeroblog · Zeroblog
Name of the Vulnerable Software and Affected Versions: Zeroblog versions 1.1f through 1.2a Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the threadID parameter in the thread.php file. Recommendations: For Zeroblog versio...