Show filters
13 Total Results
Displaying 11-13 of 13
Sort by:
Attacker Value
Unknown
CVE-2006-1133
Disclosure Date: March 10, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php. NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441.
0
Attacker Value
Unknown
CVE-2005-4729
Disclosure Date: December 31, 2005 (last updated February 22, 2025)
SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter.
0
Attacker Value
Unknown
CVE-2005-2441
Disclosure Date: August 03, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in VBzoom allow remote attackers to inject arbitrary web script and HTML via the (1) UserName parameter to profile.php or (2) UserID parameter to login.php.
0
