SIX-webboard 2.01 "show files" vulnerability

a little bit late, but "it's better late than never"! -------------- PoizonB0x Advisory1 pb0x-07-07-2001 - --------------- -NAME: SIX-webboard 2.01 "show files" vulnerability. -DESCRIPTION: Little, but very popular webboard coded by Pipo [email protected]. Find more information about the...

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot .. in the content parameter...

SIX-webboard generate.cgi 'content' Parameter Traversal Arbitrary File Access

The version of the 'generate.cgi' from SIX-webboard installed on the remote web server allows an unauthenticated, remote attacker to access arbitrary files with the privileges of the http daemon due to improper validation of user-supplied input to the 'content' variable of directory traversal...

O'Reilly WebBoard 4.10.30 JavaScript code execution problem

I found following problem in the WebBoard: The Board has a paging function. User A can send a message to user B. User B gets a javascript popup produced with alert with the message from user A. The problem is that user A can close the alert function and so he can execute his javascript code on us...

Javascript в O'Reilly WebBoard (javascript execution)

Можно вставить javascript в pager-message...

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript

source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allow a remote denial of service against a target WebBoard user's...

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript

OReilly Software WebBoard 4.10.30 - Pager Hostile JavaScript source: https://www.securityfocus.com/bid/2814/info O'Reilly WebBoard is a conferencing utility, forum, threaded discussion and real-time chat server. Versions of WebBoard are vulnerable to a JavaScript code execution bug which may allo...