Lucene search
K

14 matches found

CNVD
CNVD
added 2020/02/11 12:0 a.m.3 views

Vanilla cross-site scripting vulnerability (CNVD-2020-04666)

Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla version 2.6.3 in index.php?p = / dashboard / settings / branding. The vulnerability stems from a lack of proper validation of client-side data in the web application. A...

5.4CVSS6.4AI score0.00642EPSS
Exploits5References1
CNVD
CNVD
added 2018/11/26 12:0 a.m.2 views

Vanilla Remote Code Execution Vulnerability (CNVD-2019-06793)

Vanilla is an open source multi-language, fully extensible forum program. A security vulnerability exists in Vanilla versions prior to 2.5.5 and 2.6.x prior to 2.6.2. A remote attacker can exploit this vulnerability to execute code by calling the 'unserialize' function...

7.2CVSS7.5AI score0.0231EPSS
Exploits1References1
CNVD
CNVD
added 2018/09/29 12:0 a.m.2 views

Vanilla Cross-Site Scripting Vulnerability

Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla versions prior to 2.6.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the email field in the basic information...

6.1CVSS5.9AI score0.0024EPSS
Exploits1References1
OSV
OSV
added 2018/09/28 5:29 a.m.17 views

CVE-2018-17571

Vanilla before 2.6.1 allows XSS via the email field of a profile...

6.1CVSS5.8AI score
Exploits0References1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.15 views

Vanilla Forum 2.0.17.9 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2012/06/02 12:0 a.m.29 views

Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting

Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Tagging Enhanced plugin 1.0.1 http://vanillaforums.org/download http://vanillaforums.org/addon/tagging-plugin This...

7AI score
Exploits0
exploitpack
exploitpack
added 2012/06/02 12:0 a.m.13 views

Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting

Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Tagging Enhanced plugin 1.0.1...

6.7AI score
Exploits0
OpenVAS
OpenVAS
added 2011/06/07 12:0 a.m.19 views

Vanilla Forum Local File Inclusion Vulnerability

Vanilla Forum is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:lussumo:vanilla";...

7.1AI score
Exploits0References3
OpenVAS
OpenVAS
added 2011/06/07 12:0 a.m.17 views

Vanilla Forum Local File Inclusion Vulnerability

This host is running Vanilla Forum and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbvanillaforumlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Vanilla Forum Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...

0.1AI score
Exploits0References3
Packet Storm
Packet Storm
added 2011/05/16 12:0 a.m.16 views

Vanilla Forum 2.0.17.9 Local File Inclusion

------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/ Discovery Date..........5/15/2011 Tested...

Exploits0
Exploit DB
Exploit DB
added 2011/05/16 12:0 a.m.18 views

Vanilla Forum 2.0.17.9 - Local File Inclusion

------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/ Discovery Date..........5/15/2011 Tested...

7.4AI score
Exploits0
0day.today
0day.today
added 2011/05/16 12:0 a.m.25 views

Vanilla Forum 2.0.17.9 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2011/05/16 12:0 a.m.9 views

Vanilla Forum 2.0.17.9 - Local File Inclusion

Vanilla Forum 2.0.17.9 - Local File Inclusion ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

Exploits0
Tenable Nessus
Tenable Nessus
added 2007/10/22 12:0 a.m.16 views

Vanilla Forum < 1.1.4 sortcategories.php CategoryID Parameter SQL Injection

Binary data 4258.prm...

7.5CVSS7.3AI score0.00949EPSS
Exploits1References2
Rows per page
Query Builder