CVE-2001-1115

The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...

CVE-2001-0743

Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...

CVE-2001-0743

Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands...

CVE-2001-0743

Vulnerability CVE-2001-0743 affects O'Reilly WebBoard Pager 4.10. The issue: improper input validation allows remote attackers to trigger arbitrary JavaScript execution on other WebBoard users’ systems by sending a message containing an escaped single quote followed by JavaScript commands, which ...

Обратный путь в директориях SIX-webboard (directory traversal)

Обратный путь в директориях в generate.cgi...

SIX-webboard 2.01 "show files" vulnerability

a little bit late, but "it's better late than never"! -------------- PoizonB0x Advisory1 pb0x-07-07-2001 - --------------- -NAME: SIX-webboard 2.01 "show files" vulnerability. -DESCRIPTION: Little, but very popular webboard coded by Pipo [email protected]. Find more information about the...

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

SIX-webboard generate.cgi 'content' Parameter Traversal Arbitrary File Access

The version of the 'generate.cgi' from SIX-webboard installed on the remote web server allows an unauthenticated, remote attacker to access arbitrary files with the privileges of the http daemon due to improper validation of user-supplied input to the 'content' variable of directory traversal...

Javascript в O'Reilly WebBoard (javascript execution)

Можно вставить javascript в pager-message...

O'Reilly WebBoard 4.10.30 JavaScript code execution problem

I found following problem in the WebBoard: The Board has a paging function. User A can send a message to user B. User B gets a javascript popup produced with alert with the message from user A. The problem is that user A can close the alert function and so he can execute his javascript code on us...

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allo...

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript

source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allow a remote denial of service against a target WebBoard user's...