Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2005-4311
Disclosure Date: December 17, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in DCForum 6.25 and earlier, and possibly DCForum+ 1.x, allows remote attackers to inject arbitrary web script or HTML via (1) the page parameter in dcboard.php and (2) unspecified search parameters.
0
Attacker Value
Unknown
CVE-2001-0527
Disclosure Date: August 14, 2001 (last updated February 22, 2025)
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
0
Attacker Value
Unknown
CVE-2001-0437
Disclosure Date: July 02, 2001 (last updated February 22, 2025)
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
0
Attacker Value
Unknown
CVE-2001-0436
Disclosure Date: July 02, 2001 (last updated February 22, 2025)
dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
0
