vbb-abems.ch XSS vulnerability

Open Bug Bounty ID: OBB-616520 Description| Value ---|--- Affected Website:| vbb-abems.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Verkehrsbetriebe Berlin SQL Injection

Title: ====== Verkehrsbetriebe Berlin - SQL Injection Vulnerability Date: ===== 2012-01-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=138 VL-ID: ===== 138 Introduction: ============= VBB Verkehrsverbund Berlin-Brandenburg GmbH Der VBB koordiniert die Interessen der...

CVE-2003-1258

activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...

CVE-2003-1258

The CVE-2003-1258 entry affects versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6. The vulnerability allows remote attackers to gain unauthorized administrative access by issuing a URL request with the uid parameter set to the webmaster uid, indicating an authentication/authorization bypass v...

CVE-2005-3260

Multiple cross-site scripting XSS vulnerabilities in versatileBulletinBoard vBB 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via 1 the url parameter in dereferrer.php and 2 the file parameter in imagewin.php...

CVE-2005-3261

CVE-2005-3261 affects versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerability is in getversions.php, which unintentionally lists the versions of all installed scripts and can be triggered by a direct remote request. This leads to information disclosure of installed components. The provided docu...

CVE-2005-3259

Multiple SQL injection vulnerabilities in versatileBulletinBoard vBB 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 login field, 2 "search this thread" feature, 3 "search for posts" feature, 4 "forgot password" feature, 5 list parameter in...

CVE-2005-3260

CVE-2005-3260 describes multiple XSS flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via the url parameter in dereferrer.php and the file parameter in imagewin.php. The NVD entry lists a MEDIUM base score (CVSS2: AV:N/AC:...

CVE-2005-3259

The CVE-2005-3259 entry concerns multiple SQL injection flaws in versatileBulletinBoard (vBB) 1.0.0 RC2. The vulnerabilities affect several entry points and query parameters (including login, “search this thread,” “search for posts,” “forgot password,” and various index.php parameters such as lis...