CVE-2008-6091

CVE-2008-6091 describes an SQL injection in BMForum 5.6 affecting the plugins.php vulnerability when magic_quotes_gpc is disabled. The vulnerable surface is the tagname parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM)...

CVE-2008-6091

SQL injection vulnerability in plugins.php in BMForum 5.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter...

CVE-2008-6091: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugins.php in BMForum 5.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter...

BMForum 5.6 (tagname) Remote SQL Injection Vulnerability

No description provided by source. Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

BMForum 5.6 (tagname) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== BMForum 5.6 tagname Remote SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

bmforum-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

BMForum 5.6 - tagname SQL Injection

BMForum 5.6 - tagname SQL Injection Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

BMForum 5.6 - 'tagname' SQL Injection

Author: !DoktOR! Date found: 30.09.08 Product: BMForum Version: 5.6 URL: www.bmforum.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit:...

Mini-CWB <= 2.1.1 Remote XSS Vulnerability

========================================================== Mini-CWB = 2.1.1 Remote XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 25 May 2008 SITE : www.citec.us APPLICATION : BMForum VERSION : = 2.1.1 Lastest Version VENDOR :...

minicwb-xss.txt

========================================================== Mini-CWB - http://target/minicwbpath/javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php?GET= - http://target/minicwbpath/javascript/editor/editor/filemanager/browser/mcpuk/connectors/php/connector.php?POST= -...

BMForum 5.6 - bsd01header.php Cross-Site Scripting

BMForum 5.6 - bsd01header.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

BMForum Remote 5.6 Miltiple XSS Vulnerability

========================================================== BMForum Remote 5.6 Miltiple XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : BMForum VERSION : 5.6 Lastest Version VENDOR :...

BMForum 5.6 - index.php Cross-Site Scripting

BMForum 5.6 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code ...

BMForum 5.6 - 'bsd01header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

bmforum-xss.txt

========================================================== BMForum Remote 5.6 Miltiple XSS Vulnerability ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : BMForum VERSION : 5.6 Lastest Version VENDOR :...

BMForum 5.6 - bsd01footer.php Cross-Site Scripting

BMForum 5.6 - bsd01footer.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

BMForum 5.6 - 'bsd01footer.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

BMForum 5.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29339/info BMForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2006-4835

Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...

BMForum multiple XSS flaws

The remote version of BMForum is affected by several cross-site scripting vulnerabilities. The issues are due to failures of the application to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced...