3 results (0.010 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2007-6298

https://notcve.org/view.php?id=CVE-2007-6298

Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to inject arbitrary web script or HTML via Shoutbox block messages. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo Shoutbox para Drupal 5.x versiones anteriores a Shoutbox 5.x-1.1 permite a usuarios remotos autenticados inyectar scripts web o HTML de su elección mediante mensajes de bloque Shoutbox. • http://drupal.org/node/198163 http://osvdb.org/39053 http://secunia.com/advisories/27953 http://www.securityfocus.com/bid/26736 https://exchange.xforce.ibmcloud.com/vulnerabilities/38885 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.1EPSS: 41%CPEs: 2EXPL: 2

CVE-2006-3989 – k_shoutbox 4.4 - Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-3989

PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter. Vulnerabilidad PHP de inclusión remota de archivo en index.php en Knusperleicht Shoutbox 4.4 y anteriores permiten a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro sb_include_path. • https://www.exploit-db.com/exploits/2103 http://secunia.com/advisories/21302 http://securityreason.com/securityalert/1325 http://www.osvdb.org/27709 http://www.securityfocus.com/archive/1/441815/100/0/threaded http://www.securityfocus.com/bid/19273 http://www.vupen.com/english/advisories/2006/3090 https://exchange.xforce.ibmcloud.com/vulnerabilities/28123 •

CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 3

CVE-2002-1429 – ShoutBox 1.2 - 'Form' HTML Injection

https://notcve.org/view.php?id=CVE-2002-1429

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter. Vulnerabilidad de secuencias de comandos (scripting) en sitios cruzados (XSS) en board.php de endity.com ShoutBOX permite a atacantes remotos injectar HMTL arbitrario en la página shoutbox mediante el parámetro de sitio (site). • https://www.exploit-db.com/exploits/21668 http://archives.neohapsis.com/archives/bugtraq/2002-07/0389.html http://endity.com/board/index.php?act=ST&f=3&t=68&s=363128162825b2d7fcf60c9cd2a292fe http://www.iss.net/security_center/static/9739.php http://www.securityfocus.com/bid/5354 •