CVE-2006-3735

Mail2Forum (phpBB module) versions 1.2 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause remote PHP code execution by supplying a URL in the m2f_root_path parameter to one of four scripts (m2f/m2f_phpbb204.php, m2f/m2f_forum.php, m2f/m2f_mailing...

CVE-2005-3735

CVE-2005-3735 involves multiple SQL injection vulnerabilities in the e-Quick Cart system. The affected components/parameters are: (1) productid in shopaddtocart.asp, (2) strpemail in shopprojectlogin.asp, and (3) id in shoptellafriend.asp. The underlying issue is unsafely constructed SQL queries ...