CVE-2012-5327: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 deleteusrgrp parameter in a deleteusergroups action, 2 usergroup paramete...

Code injection

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

CVE-2012-1590

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

CVE-2012-1590

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

CVE-2012-1590

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

PT-2012-3363

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.14 Description The issue allows remote authenticated users to obtain sensitive information, such as the post title, via the forum overview page due to improper checking of user permissions for unpublished forum posts...

CVE-2012-1590: Undefined Security Weakness

The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which allows remote authenticated users to obtain sensitive information such as the post title via the forum overview page...

NewWard CMS SQL Injection

Exploit Title : NewWard Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.newward.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Web Site Design by...

Symbion Productions CMS SQL Injection

Exploit Title : Symbion Productions Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.symbionproductions.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

XM Forum - search.asp SQL Injection

XM Forum - search.asp SQL Injection source: https://www.securityfocus.com/bid/55299/info XM Forum is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

XM Forum - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/55299/info XM Forum is prone to an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

WordPress Plugin Simple:Press Forum - Arbitrary File Upload

WordPress Plugin Simple:Press Forum - Arbitrary File Upload source: https://www.securityfocus.com/bid/55243/info The Simple:Press Forum plugin is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplie...

WordPress Plugin Simple:Press Forum - Arbitrary File Upload

source: https://www.securityfocus.com/bid/55243/info The Simple:Press Forum plugin is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload...

WordPress Simple Forum Shell Upload

-----------IN THE NAME OF Allah-------------- Exploit : WordPress Plugin "Simple Forum" File Upload Vulnerability Author : Iranian Dark Coders Discovered By : Mr.Cicili Plugin Download Link : http://simple-press.com/download/ Google Dork :...

Sphpforum 0.4 Cross Site Scripting / SQL Injection

Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small, simple, fast and allow easy integration into...

sphpforum 0.4 - Multiple Vulnerabilities

sphpforum 0.4 - Multiple Vulnerabilities Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small,...

sphpforum 0.4 - Multiple Vulnerabilities

Author: loneferret of Offensive Security Product: sphpforum Version: 0.4 older versions may be affected Software Download: http://sourceforge.net/projects/sphpforum/ Description: Simple PHP Forum is a PHP based forum/BBS board is designed to be small, simple, fast and allow easy integration into...

CVE-2012-4328

Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors...

CVE-2012-4328

The affected products and versions are: vBulletin Suite 4.1.2–4.1.12 , Forum 4.1.2–4.1.12 , and the MAPI plugin 1.4.3 for vBulletin 3.x . The CVE-2012-4328 entry is described as an unspecified vulnerability with unknown impact and attack vectors; no concrete root cause, exploit details, or remedi...

PT-2012-5330

Name of the Vulnerable Software and Affected Versions vBulletin Suite versions 4.1.2 through 4.1.12 vBulletin Forum versions 4.1.2 through 4.1.12 vBulletin MAPI plugin version 1.4.3 for vBulletin 3.x Description The issue concerns an unspecified vulnerability in the MAPI of vBulletin products. Th...