CVE-2014-9561

Description

References

• packetstormsecurity.com/files/129889/SoftBB-0.1.3-Cross-Site-Scripting.html
• seclists.org/fulldisclosure/2015/Jan/21
• tetraph.com/security/cves/cve-2014-9561-softbb-net-softbb-xss-cross-site-scripting-security-vulnerability
• securityfocus.com/bid/71987

softbb 的其他漏洞

• CVE-2014-9560高危 7.5SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the po…
• CVE-2006-4633中危 5.0index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page[] paramete…
• CVE-2006-4632高危 7.5Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the…
• CVE-2006-4631中危 6.5Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to u…
• CVE-2006-4593中危 6.8Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HT…