EUVD-2006-0785

Malware in sbrugna...

EUVD-2005-3543

Malware in sbrugna...

XMB Forum 1.8/1.9 u2u.php username Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful...

CVE-2006-3994: Undefined Security Weakness

SQL injection vulnerability in the u2usendrecp function in u2u.inc.php in XMB aka extreme message board 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $POST and bypasses the protection scheme...

CVE-2006-0779: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...

CVE-2006-0779

Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...

CVE-2006-0779

CVE-2006-0779 concerns a cross-site scripting (XSS) vulnerability in XMB Forums (u2u.php) affecting 1.9.3 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via the username parameter, demonstrated with a URL-encoded iframe tag. Affected component: u2u.php; vulnerabilit...

CVE-2005-3544

Cross-site scripting XSS vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2005-3544

Cross-site scripting XSS vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2005-3544

** vuln: XMB 1.9.3** has an XSS in u2u.php that lets remote attackers inject arbitrary scripts via the username parameter. The vulnerability arises from insufficient input sanitization in the web interface, enabling script execution in the victim’s browser. No explicit exploit details, affected v...

CVE-2005-3544: Undefined Security Weakness

Cross-site scripting XSS vulnerability in u2u.php in XMB 1.9.3 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

xmbforums.txt

Hello This is Xss in the old versions and html injection in the new versions of xmb forums .. Discovered By : HACKERS PAL injected file u2u.php as the below u2u.php?action=send&username=|Html Injection OR XSS Thanks ,,...

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting

XMB Forum 1.9.3 - u2u.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

CVE-2005-3364: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DboardGear allow remote attackers to execute arbitrary SQL commands via 1 the buddy parameter in buddy.php, 2 the u2uid parameter in u2u.php, and 3 an invalid theme file in the themes action to ctrtools.php...

CVE-2004-1862: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Extreme Messageboard XMB 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the 1 xmbuser parameter to xmb.php, 2 folder parameter to u2u.php, 3 viewmost, replymost, or latest parameter to stats.php, 4 messag...