AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

Aceboard forum, SQL injection

Aceboard is prone to a sql injection vulnerability because it fails to properly sanitize user-supplied input into Recherche.php form. An attacker can exploit this issue to modify initial query and reveal information from mysql databse. see u, karmaguedon...

molyx board X_UP_CALLING_LINE_ID sql injection Remote Privilege Exploit

No description provided by source. molyx board XUPCALLINGLINEID sql injection Remote Privilege Exploit !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with php5 or php4&&GPC=off Example: C:\mlexp.pl 127.0.0.1 /bbs/ 1 prepare to connect... + connected prepare to send data... + OK...

CVE-2007-4116

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

Sql injection

SQL injection vulnerability in signin.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...

Sql injection

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4110

The CVE-2007-4110 entry describes an SQL injection in sign_in.aspx of a Message Board/Threaded Discussion Forum Application Template, allowing remote execution of arbitrary SQL via the Password parameter. The issue is caused by unsafely incorporated user input into SQL commands, exposing partial ...

CVE-2007-4116

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4116

CVE-2007-4116 describes a SQL injection in the PHP-based forum component of Metyus Forum Portal 1.0, specifically in the file philboard_forum.asp , where the attacker can send a crafted forumid parameter to execute arbitrary SQL commands. The provided description indicates remote exploitation and...

CVE-2007-4116: Undefined Security Weakness

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4110: Undefined Security Weakness

SQL injection vulnerability in signin.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...

Code injection

Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to 1 forum.php, 2 cp.php, and possibly other unspecified components...

Snitz Forum < 3.4.0.08 SQL Injection

Binary data 5105.prm...

Message Board / Threaded Discussion Forum SQL INJECTION

A R I A - S E C U R I T Y Message Board / Threaded Discussion Forum SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

metyus-sql.txt

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql İnjection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal v1.0

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql njection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection

source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

BSM Store Dependent Forums 1.02 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...