4 matches found
PT-2006-3887 · Viart · Viart Shop
Name of the Vulnerable Software and Affected Versions: ViArt Shop Free version 2.5.5 Description: A SQL injection issue might allow remote attackers to execute arbitrary SQL commands, possibly involving the forum id parameter. Recommendations: For version 2.5.5, at the moment, there is no...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...
DEBIAN-CVE-2006-0517
Multiple SQL injection vulnerabilities in formulaires/inc-formulaireforum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 idforum, 2 idarticle, or 3 idbreve parameters to forum.php3; 4 unspecified vectors related...
PT-2005-4310 · Chipmunk · Chipmunk Forum
Name of the Vulnerable Software and Affected Versions: Chipmunk Forum script affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the forumID...