7325 matches found
Netzbrett 1.5.1 SQL inj. vuln.
Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...
CVE-2005-3815
SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...
CVE-2005-3815
SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...
CVE-2005-3815
CVE-2005-3815 affects Orca Forum 4.3b and earlier, where a SQL injection flaw in forum.php (msg parameter) allows remote attackers to execute arbitrary SQL commands. The vulnerability is confirmed in multiple sources (NVD/CVE records). The available documents do not specify a remediation or patch...
Zorum Forum 3.5 "rollid" SQL inj. vuln.
Zorum Forum 3.5 "rollid" SQL inj. vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zorum-forum-35-rollid-sql-inj-vuln.html Vendor:http://zorum.phpoutsourcing.com/index.php affected version: 3.5 and prior Vuln. Description: Input passed to the...
Orca forum 4.3.x "msg" Sql inj.
Orca forum 4.3.x "msg" Sql inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/orca-forum-43x-msg-sql-inj.html Vendor:http://www.greywyvern.com/orca affected version:4.3b and prior Product description: Looking for a simple feedback or discussion...
Orca Forum 4.3 - 'forum.php' SQL Injection
source: https://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
VUBB Forum SQL and XSS vuln.
VUBB Forum SQL and XSS vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html Vendor:http://www.vubb.com/ affected version: alpha rc1 Product description: Free PHP/MySQL forum/bulletin board system. The only...
Orca Forum 4.3 - forum.php SQL Injection
Orca Forum 4.3 - forum.php SQL Injection source: https://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
WSN Forum "id" SQL Injection Vulnerability
WSN Forum "id" SQL Injection Vulnerability Vuln. dicovered by : r0t Orginal advisory:http://pridels.blogspot.com/2005/11/wsn-forum-id-sql-injection.html Vendor:http://www.wsnforum.com/ affected version:1.21 and maybe prior versions. Vuln Description: Input passed to the "id" parameter in...
The use of site MIS-configuration to gain full control-vulnerability warning-the black bar safety net
In fact,now the online safety site and learn Black the site too much, 斡 Guoblowing na? bralso more and more,these contributed to the many sites and individuals, enhance safety awareness,is a good thing. So such as ipc$weak passwords,printer,IDQ remote overflow,UNICODE,3389 input and other...
CVE-2005-3682
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via 1 the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in 2 ForumTopicDetails.php and 3 ForumReply.php...
CVE-2005-3682
CVE-2005-3682 describes multiple SQL injection vulnerabilities in Wizz Forum 1.20 . Attackers can remotely exploit: (1) AuthID in ForumAuthDetails.php, (2) TopicID in ForumTopicDetails.php, and (3) TopicID/ForumReply in ForumReply.php to execute arbitrary SQL commands. The description indicates t...
CVE-2005-3682
Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via 1 the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in 2 ForumTopicDetails.php and 3 ForumReply.php...
Multiple SQL Injection Vulnerabilities in class-1 Forum Software (v 0.24.4)
Multiple SQL Injection Vulnerabilities in class-1 Forum Software v 0.24.4 Author: r0t hackers.by.lv Date: 17 nov. 2005 Software: class-1 Forum Software v 0.24.4 Vendor:http://www.class1web.co.uk/ Affected:v 0.24.4 and prior Description: Multiple parameters isn't properly sanitised before being us...
DSA-899-1 egroupware - programming errors
Bulletin has no description...
CVE-2002-2200
The CVE references Benjamin Lefevre Dobermann FORUM 0.5 and earlier, where remote attackers can include and execute malicious PHP files via the subpath variable in four PHP scripts: entete.php, enteteacceuil.php, index.php, and newtopic.php. This is a remote-code-injection scenario affecting that...
CVE-2002-2190
The CVE relates to ArtsCore Studios CuteCast Forum 1.2, where user passwords are stored in plaintext under the web document root. The underlying vulnerability is improper password storage, enabling remote attackers to retrieve passwords by requesting a ".user" file over HTTP. The available source...
CVE-2002-2200
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein 1 entete.php, 2 enteteacceuil.php, 3 index.php, or 4 newtopic.php...