14 matches found
Vanilla cross-site scripting vulnerability (CNVD-2020-04666)
Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla version 2.6.3 in index.php?p = / dashboard / settings / branding. The vulnerability stems from a lack of proper validation of client-side data in the web application. A...
Vanilla Remote Code Execution Vulnerability (CNVD-2019-06793)
Vanilla is an open source multi-language, fully extensible forum program. A security vulnerability exists in Vanilla versions prior to 2.5.5 and 2.6.x prior to 2.6.2. A remote attacker can exploit this vulnerability to execute code by calling the 'unserialize' function...
Vanilla Cross-Site Scripting Vulnerability
Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla versions prior to 2.6.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the email field in the basic information...
CVE-2018-17571
Vanilla before 2.6.1 allows XSS via the email field of a profile...
Vanilla Forum 2.0.17.9 LFI Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/...
Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting
Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Tagging Enhanced plugin 1.0.1 http://vanillaforums.org/download http://vanillaforums.org/addon/tagging-plugin This...
Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting
Vanilla Forum Tagging Plugin Enchanced 1.0.1 - Persistent Cross-Site Scripting Title: Vanilla Tagging Enchanced 1.0.1 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Tagging Enhanced plugin 1.0.1...
Vanilla Forum Local File Inclusion Vulnerability
Vanilla Forum is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:lussumo:vanilla";...
Vanilla Forum Local File Inclusion Vulnerability
This host is running Vanilla Forum and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbvanillaforumlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Vanilla Forum Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...
Vanilla Forum 2.0.17.9 Local File Inclusion
------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/ Discovery Date..........5/15/2011 Tested...
Vanilla Forum 2.0.17.9 - Local File Inclusion
------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/ Discovery Date..........5/15/2011 Tested...
Vanilla Forum 2.0.17.9 LFI Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...
Vanilla Forum 2.0.17.9 - Local File Inclusion
Vanilla Forum 2.0.17.9 - Local File Inclusion ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...
Vanilla Forum < 1.1.4 sortcategories.php CategoryID Parameter SQL Injection
Binary data 4258.prm...