CVE-2017-20106 Lithium Forum Compose Message server-side request forgery

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...

CVE-2017-20106

The CVE-2017-20106 entry concerns Lithium Forum 2017 Q1. A server-side request forgery (SSRF) vulnerability arises from manipulating the upload_url argument in the Compose Message Handler component. The attack requires local access, and public exploits have been disclosed. Documented impact indic...

CVE-2017-20106 Lithium Forum Compose Message server-side request forgery

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...

CVE-2017-20106: Server-Side Request Forgery (SSRF)

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...

Khoros Forum 代码问题漏洞

Khoros Forum Lithium Forum is a forum system from the US-based Khoros Corporation. A security vulnerability exists in the 2017 Q1 release of Khoros Forum Lithium Forum, which stems from a server-side request forgery vulnerability discovered via the uploadurl parameter...

Meet the Administrators of the RSOCKS Proxy Botnet

Authorities in the United States, Germany, the Netherlands and the U.K. last week said they dismantled the "RSOCKS" botnet, a collection of millions of hacked devices that were sold as "proxies" to cybercriminals looking for ways to route their malicious traffic through someone elses computer...

President Putin’s Economic Forum Speech Delayed due to DDoS Attack

By Deeba Ahmed The Russian Economic Forum was taking place in St. Petersburg when its proceedings were stalled due to a… This is a post from HackRead.com Read the original post: President Putin’s Economic Forum Speech Delayed due to DDoS Attack...

Online Discussion Forum Site SQL注入漏洞（ CNVD-2022-58959 ）

Online Discussion Forum Site is an application of Sourcecodester. An online discussion forum, Online Discussion Forum Site is vulnerable to a SQL injection vulnerability in /odfs/posts/viewpost.php that lacks validation of externally entered SQL statements. An attacker could use this vulnerabilit...

Online Discussion Forum Site SQL注入漏洞（CNVD-2022-58961 ）

Sourcecodester Online Discussion Forum Site is an application of Sourcecodester, an online discussion forum. A SQL injection vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=deleteteam missing filter escaping for SQL data. ...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

Sql injection

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31296

CVE-2022-31296 affects the Sourcecodester-based Online Discussion Forum Site 1. The vulnerability is a blind SQL injection in the /odfs/posts/view_post.php component (parameter: id). Root cause: lack of input validation allows unauthenticated attackers to manipulate SQL queries, enabling data ext...

CVE-2022-31296

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31296: Improper Neutralization of Special Elements used in an SQL Command

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...

CVE-2022-31295

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

CVE-2022-31295

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

Design/Logic Flaw

An issue in the deletepost function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts...

CVE-2022-31295

CVE-2022-31295 affects Online Discussion Forum Site 1.0, with the delete_post() function in Maset.php:133 allowing unauthenticated attackers to arbitrarily delete posts. Multiple connected sources confirm the issue and describe it as a failure in delete_post(), enabling post deletion without auth...