7911 matches found
CVE-2021-25045: Improper Neutralization of Special Elements used in an SQL Command
The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue...
Discourse has an unspecified vulnerability (CNVD-2022-05505)
Discourse is an open source community discussion platform that includes community, email, and chat room features. A security vulnerability exists in Discourse, which stems from the fact that users invited via email to a forum with "must approve users" enabled will automatically log in, bypassing...
Simple Forum-Discussion System SQL Injection Vulnerability
Simple Forum-Discussion System is a simple forum/discussion system. SQL injection vulnerability exists in Simple Forum-Discussion System, which originates in various components such as manage topic.php, manage user.php and ajax.php. Lack of validation of externally entered SQL statements. An...
CVE-2021-45252
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
CVE-2021-45252
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
CVE-2021-45252
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
Sql injection
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
CVE-2021-45252
CVE-2021-45252 affects Simple Forum-Discussion System 1.0 with SQL injection vulnerabilities in the manage_topic.php, manage_user.php, and ajax.php components. Root cause: lack of input validation allowing arbitrary SQL execution, enabling an attacker to retrieve potentially all database data. Im...
CVE-2021-45252
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
Simple Forum-Discussion System SQL注入漏洞
Simple Forum-Discussion System is a simple forum/discussion system. SQL injection vulnerability exists in Simple Forum-Discussion System, which originates in various components such as manage topic.php, manage user.php and ajax.php. Lack of validation of externally entered SQL statements. An...
CVE-2021-45252: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability...
Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
The plugin does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue POST /wp-admin/admin.php?page=asgarosforum-structure HTTP/1.1 Accept:...
WordPress Asgaros Forum plugin <= 1.15.14 - SQL Injection (SQLi) vulnerability
SQL Injection SQLi vulnerability discovered by Trang LKB in WordPress Asgaros Forum plugin versions = 1.15.14. Solution Update the WordPress Asgaros Forum plugin to the latest available version at least 1.15.15...
Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id
The plugin does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue PoC POST /wp-admin/admin.php?page=asgarosforum-structure HTTP/1.1 Accept:...
Command Execution Vulnerability in Patrol Cloud Light Forum System (CNVD-2022-01416)
Cruise cloud light forum system contains forums, Q&A module, using JAVA MYSQL architecture. A command execution vulnerability exists in the Patrol Cloud Light Forum system, which can be exploited by an attacker to gain server control privileges...
Acronis: [forum.acronis.com] JNDI Code Injection due an outdated log4j component
Vulnerability description not provided...
The vulnerability of the vBulletin commercial web forum, related to errors in code generation, allows a hacker to execute arbitrary commands.
The vulnerability of the commercial vBulletin web forum is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created parameter in the ajax/render/widgetphp script...
Cross-site Scripting (XSS) - Stored in yeswiki/yeswiki
Description Stored XSS when Add a new entry for Forum Proof of Concept // PoC.req POST /doryphore/?BazaR&vue=saisir&action=saisirfiche&id=2 HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:96.0 Gecko/20100101 Firefox/96.0 Accept:...
GNUBOARD5 跨站脚本漏洞
GNUBOARD5 is a PHP and MySQL based web forum system. A cross-site scripting vulnerability exists in gnuboard5 that stems from the susceptibility to incorrect input during web page generation...
Simple Forum-Discussion System 1.0 SQL Injection
Simple Forum-Discussion System 1.0 Vendor Description: Multiple SQL-Injections are found on Simple Forum-Discussion System 1.0 For example on three applications which are managetopic.php, manageuser.php, and ajax.php. The attacker can be retrieving all information from the database of this system...