CVE-2008-6527: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...

Sql injection

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192

CVE-2008-5192 concerns a SQL injection vulnerability in forum.asp of W1L3D4 Philboard versions 1.14 and 1.2, exploitable via the forumid parameter. The root cause is an unsafely handled input for forumid that allows arbitrary SQL execution by an attacker. Connected records corroborate the vulnera...

CVE-2008-5192

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

DUdForum 3.0 (forum.asp iFor) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ DUdForum 3.0 forum.asp iFor Remote SQL Injection Vulnerability ================================================================ + Script Name : DUdForum 3.0 Rem0te SQL...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Sql injection

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2007-0826

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2007-0826

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2007-0826

CVE-2007-0826 describes a SQL injection in forum.asp of Kisisel Site 2007, exploitable via the forumid parameter to remotely execute arbitrary SQL commands. The vulnerability affects the handling of forumid, leading to partial confidentiality/integrity/availability impacts as described in the NVD...

CVE-2007-0826: Undefined Security Weakness

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

snitzXSS.txt

ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="function%20xssbaslatalert"Xss%20Here"; etc...

CVE-2006-4796: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter strtopicsortord variable...

Snitz Forums 2000 - forum.asp Cross-Site Scripting

Snitz Forums 2000 - forum.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authenticatio...

Snitz Forums 2000 - 'forum.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20004/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. This could allow an attacker to steal cookie-based authentication credentials and launch other attacks. Version...

PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability ============================================================= Title : PrideForum 1.0 forum.asp Remote SQL Injection...

PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...

PrideForum 1.0 - forum.asp SQL Injection

PrideForum 1.0 - forum.asp SQL Injection Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...