CVE-2005-0858

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to entete.php or 2 the login parameter to register.php...

CVE-2005-0857

Cross-site scripting XSS vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter...

CVE-2005-0856

CoolForum 0.8.1 beta and earlier is affected by a SQL injection in requests to alert.php and viewip.php, allowing remote attackers to manipulate SQL commands. The issue is attributed to a likely input handling flaw in these endpoints, enabling partial/complete manipulation of queries as described...

CVE-2005-0855

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to 1 entete.php, 2 profileaccueil.php, 3 profilemdp.php, 4 profilenotify.php, 5 profileoptions.php, 6 profileperso.php, 7 profilepm.php, or 8 readannonce.php, which leaks the full...

CVE-2005-0858

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to entete.php or 2 the login parameter to register.php...

CVE-2005-0856

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to 1 alert.php or 2 viewip.php, possibly due to a SQL injection vulnerability...

CVE-2005-0858

CVE-2005-0858 affects CoolForum 0.8 and earlier, with multiple SQL injection vulnerabilities. The issues arise from unsanitized input in the admin/entete.php script (pseudo parameter) and the register.php script (ilogin/login parameter), enabling remote attackers to manipulate SQL queries and pot...

CVE-2005-0855

CVE-2005-0855 affects CoolForum 0.8.1 beta and earlier. The issue allows remote attackers to trigger PHP error messages via direct requests to eight PHP pages (entete.php, profile_accueil.php, profile_mdp.php, profile_notify.php, profile_options.php, profile_perso.php, profile_pm.php, readannonce...

CVE-2005-0857

CVE-2005-0857 describes a cross-site scripting (XSS) vulnerability in CoolForum 0.8 and earlier, where an attacker can inject arbitrary web script or HTML through the img parameter in avatar.php. The connected documents corroborate this XSS claim, with NVD listing the CVE and Tenable/Nessus plugi...

CVE-2005-0855: Undefined Security Weakness

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to 1 entete.php, 2 profileaccueil.php, 3 profilemdp.php, 4 profilenotify.php, 5 profileoptions.php, 6 profileperso.php, 7 profilepm.php, or 8 readannonce.php, which leaks the full...

CVE-2005-0856: Undefined Security Weakness

CoolForum 0.8.1 beta and earlier allows remote attackers to manipulate SQL commands via certain requests to 1 alert.php or 2 viewip.php, possibly due to a SQL injection vulnerability...

CVE-2005-0857: Undefined Security Weakness

Cross-site scripting XSS vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter...

CVE-2005-0858: Undefined Security Weakness

Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to entete.php or 2 the login parameter to register.php...

-==CoolForum Path Disclosure & Possible SQL Injection==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 11 - 20/03/05 -------------------------------------------------------- Program: CoolForum Homepage: http://coolforum.net/ Vulnerable Versions: CoolForum v.0.8.1 beta & Lowers Risk: Low!! Impact: Path...

CoolForum SQL and XSS Vulnerabilities

Binary data 2725.prm...

CoolForum 0.5/0.7/0.8 - 'register.php?login' SQL Injection

source: https://www.securityfocus.com/bid/12852/info Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality. Multiple SQL injection...

CoolForum 0.50.70.8 - register.php?login SQL Injection

CoolForum 0.50.70.8 - register.php?login SQL Injection source: https://www.securityfocus.com/bid/12852/info Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry o...

CoolForum Multiple SQL Injections

The version of CoolForum, a bulletin-board application written in PHP, installed on the remote host fails to sanitize input to several parameters to scripts in the 'admin' directory before using it in database queries. An attacker could leverage these issues to manipulate SQL queries or attack th...

CoolForum < 0.8 SQL Injection

Binary data 2569.prm...

[SA14016] CoolForum Two Vulnerabilities

TITLE: CoolForum Two Vulnerabilities SECUNIA ADVISORY ID: SA14016 VERIFY ADVISORY: http://secunia.com/advisories/14016/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: CoolForum v0.x http://secunia.com/product/401/ DESCRIPTION: benjilenoob h...