Cross site scripting

Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...

CVE-2015-2275

WoltLab Community Gallery 2.0 (pre-12/26/2014) is affected by a stored XSS via parameters[data][7][title] in the saveImageData action to index.php/AJAXProxy. The vulnerability enables arbitrary script/HTML injection and is documented with a PoC and public references. Fixed in Community Gallery 2....

CVE-2015-2275

Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...

Community Gallery 2.0 Cross Site Scripting

Vulnerability title: Community Gallery - Srored Corss-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...

[RT-SA-2014-015] Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0

Advisory: Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Tapatalk plugin for the WoltLab Burning Board forum software, which allows attackers to inject arbitrary JavaScript code via URL parameters...

CVE-2014-8869

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

Open redirect

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

CVE-2014-8870

CVE-2014-8870 concerns the Open Redirect vulnerability in the Tapatalk (com.tapatalk.wbb4) plugin for Woltlab Burning Board 4.0. The issue is triggered by supplying a malicious URL in the board_url parameter of mobiquo/smartbanner/welcome.php, allowing remote attackers to redirect users to arbitr...

CVE-2014-8869

The CVE-2014-8869 entry concerns the Tapatalk plugin for Woltlab Burning Board 4.0 (com.tapatalk.wbb4). Affected module: mobiquo/smartbanner/welcome.php where improper encoding of two URL parameters (app_android_id and app_kindle_url) enables cross-site scripting. The vulnerability allows remote ...

CVE-2014-8870

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...

CVE-2014-8869

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...

WoltLab Burning Board 4.0 Tapatalk Cross Site Scripting

Advisory: Cross-site Scripting in Tapatalk Plugin for WoltLab Burning Board 4.0 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Tapatalk plugin for the WoltLab Burning Board forum software, which allows attackers to inject arbitrary JavaScript code via URL parameters...

Tapatalk for WoltLab Burning Board URI Redirection Vulnerability

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. An open redirection vulnerability exists in Tapatalk for WoltLab Burning Board that allows an attacker to construct a malicious URI, trick users into parsing it, and redirect them to an arbitrary web site for phishing...

WoltLab Burning Board 4.0 Tapatalk Open Redirect

The Tapatalk Plugin com.tapatalk.wbb4 for WoltLab Burning Board 4.0 prior to version 1.1.2 allowed to redirect users to arbitrary URLs. This was possible by specifying the target URL in the URL parameter boardurl in URLs like the following:...

Woltlab Burning Board 2.3.x Register.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21370/info Woltlab Burning Board is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Woltlab Burning Board 2.3.6 Addon (hilfsmittel.php) SQL Injection Vulnerability

No description provided by source. Woltlab Burning Board 2.3.6 Addon hilfsmittel.php SQL Injection Vulnerability + Autor: Crazyball + Vulnerabilities SQL Injection + Page: http://www.euweb.at/ + Language: PHP + Version: Hilfsmitteldatenbank 1.0 + Date: n/a + Vendor: http://www.woltlab.com/de/ +...

Woltlab 1.1/2.x Info-DB Info_db.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Woltlab Burning Board FLVideo Addon (video.php, value param) - SQL Injection

No description provided by source...