CVE-2007-2534

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the 1 ADMINUSER USER and 2 ADMINPASS PASS parameters during a login. NOTE: CVE disputes this vulnerability, since ADMINUSER/ADMINPASS are initialized before use...

CVE-2007-2534

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the 1 ADMINUSER USER and 2 ADMINPASS PASS parameters during a login. NOTE: CVE disputes this vulnerability, since ADMINUSER/ADMINPASS are initialized before use...

CVE-2007-2534

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the 1 ADMINUSER USER and 2 ADMINPASS PASS parameters during a login. NOTE: CVE disputes this vulnerability, since ADMINUSER/ADMINPASS are initialized before use...

CVE-2007-2534

The software phpHoo3 contains multiple SQL injection vulnerabilities in the admin.php file. These flaws allow remote attackers to execute arbitrary SQL commands via the ADMIN_USER (USER) and ADMIN_PASS (PASS) parameters during the login process. It is important to note that the CVE disputes this ...

CVE-2007-2534: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands via the 1 ADMINUSER USER and 2 ADMINPASS PASS parameters during a login. NOTE: CVE disputes this vulnerability, since ADMINUSER/ADMINPASS are initialized before use...

phphoo3-sql.txt

phpHoo3 Login SQL injection // AYYILDIZ.ORG Gururla Sunar... download:http://cable-modems.org/phpHoo/files/phphoo3.zip author : iLker Kandemir mynet.com Risk : High Class : Remote Vuln. Script : phpHoo3 tnx : h0tturk,ekin0x,Gencnesil,Gencturk,koray,Ajann .. Vulnerable; ///admin.php code ;...

sb-sql.txt

Remote Login Bypass SQL Injection Vulnerability admin.php AYYILDIZ.ORG Presents. SchoolBoard http://free-php-scripts.net/download.php?id=120 author : iLker Kandemir mynet.com Tnx : h0tturk,ekin0x,Dr.Max Virus,Gencnesil,Gencturk,Ajann Vulnerable; /admin.php...

SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability

Remote Login Bypass SQL Injection Vulnerability admin.php AYYILDIZ.ORG Presents. SchoolBoard http://free-php-scripts.net/download.php?id=120 author : iLker Kandemir ilkerkandemir at mynet.com Tnx : h0tturk,ekin0x,Dr.Max Virus,Gencnesil,Gencturk,Ajann Vulnerable; /admin.php...

CVE-2007-2339

Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via 1 a modified recipients parameter name in a pm.php; 2 the curr parameter to the b badwords aka censorlist or c banlist module in admin.php; or 3 the "Edit groups / Add group...

CVE-2007-2339: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands via 1 a modified recipients parameter name in a pm.php; 2 the curr parameter to the b badwords aka censorlist or c banlist module in admin.php; or 3 the "Edit groups / Add group...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in the groups module or 2 the smileyid parameter in the smileys modsettings module...

Design/Logic Flaw

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

CVE-2007-2248

Multiple cross-site scripting XSS vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in the groups module or 2 the smileyid parameter in the smileys modsettings module...

CVE-2007-2248

CVE-2007-2248 involves Phorum, specifically XSS in admin.php prior to 5.1.22. The vulnerabilities affect the group_id parameter in the groups module and the smiley_id parameter in the smileys modsettings module, enabling remote attackers to inject arbitrary web script or HTML. The connected docum...

CVE-2007-2250

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

CVE-2007-2250: Undefined Security Weakness

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

CVE-2007-2248: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inject arbitrary web script or HTML via the 1 groupid parameter in the groups module or 2 the smileyid parameter in the smileys modsettings module...

Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection

Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site...

Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

CVE-2007-2103: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 admin.php and 2 timedifference.php...