177 matches found
CVE-2006-0778
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...
CVE-2006-0779
Cross-site scripting XSS vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag...
CVE-2006-0778
CVE-2006-0778 concerns multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via (1) the $u2u_select array parameter to u2u.inc.php and (2) the $val variable (fidpw0 cookie value) in today.php. Affected product:...
CVE-2006-0778
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 $u2uselect array parameter to u2u.inc.php and 2 $val variable fidpw0 cookie value in today.php...
CVE-2006-0779
CVE-2006-0779 concerns a cross-site scripting (XSS) vulnerability in XMB Forums (u2u.php) affecting 1.9.3 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via the username parameter, demonstrated with a URL-encoded iframe tag. Affected component: u2u.php; vulnerabilit...
XMB-1.9.3.txt
GulfTech Security Research February 12, 2006 Vendor : XMB Software URL : http://www.xmbforum.com/ Version : XMB Forums $val if pregmatch'^fidpw0-9+$', $key, $fetch $r2 = "fid='$fetch1' AND password='$val'"; if count$r2 0 $r = implode' OR ', $r2; $q = $db-query"SELECT fid FROM $tableforums WHERE...
XMB Forums Multiple Vulnerabilities
GulfTech Security Research February 12, 2006 Vendor : XMB Software URL : http://www.xmbforum.com/ Version : XMB Forums = 1.9.3 Risk : Multiple Vulnerabilities Description: XMB Forums is a popular forum software written in php and mysql that allows you to open up your own online community or...
[SA18821] XMB Forums today.php Cookie Data SQL Injection
TITLE: XMB Forums today.php Cookie Data SQL Injection SECUNIA ADVISORY ID: SA18821 VERIFY ADVISORY: http://secunia.com/advisories/18821/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: XMB 1.x http://secunia.com/product/1491/ DESCRIPTION: James Bercegay has...
XMB Forum 1.81.9 - u2u.php?Username Cross-Site Scripting
XMB Forum 1.81.9 - u2u.php?Username Cross-Site Scripting source: https://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied...
XMB Forum 1.8/1.9 - 'u2u.php?Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16604/info XMB Forum is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. Successful exploits of these vulnerabilities could...
XMB-XSS.txt
NightWarrior nightwarrior771athotmail.com XMB Forum HTML Code Injection http://www.xmbforum.com/ Post This Code: Contact :nightwarrior771athotmail.com NightWarrior...
CVE-2006-0365
Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...
Cross site scripting
Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...
CVE-2006-0365
CVE-2006-0365 concerns a Cross-site Scripting (XSS) vulnerability in XMB (extreme message board). The issue enables remote attackers to inject arbitrary web script or HTML by supplying JavaScript in the SRC attribute of an IMG element. Documents do not provide specific vulnerable versions, exploi...
CVE-2006-0365
Cross-site scripting XSS vulnerability in XMB aka extreme message board allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element...
XMB Forum HTML Code Injection
NightWarriorKurdish Hacker nightwarrior771athotmail.com XMB Forum HTML Code Injection http://www.xmbforum.com/ Post This Code: img src=javascript:alert'XSS' Contact :nightwarrior771athotmail.com NightWarriorKurdihs Hacker...
CVE-2004-2588
Intentional information leak in phpinfo.php in XMB aka extreme message board 1.9 beta aka Nexus beta allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application...
CVE-2004-2588
The CVE-2004-2588 entry describes an information-leak flaw in phpinfo.php within XMB (Extreme Message Board) version 1.9 beta (Nexus beta). The vulnerability allows remote attackers to obtain sensitive information such as web server and PHP configuration details. The available sources (NVD/CVE re...
kapda-13.txt
KAPDA::13 - XMB extreme message board HTML Injection & Path Disclosure. KAPDA New advisory Vendor: http://www.xmbforum.com Bug: HTML Injection & Path Disclosure Exploitation: Remote with browser Description: -------------------- XMB is a free message board powered by PHP and MySQL. Vulnerability:...