CVE-2006-1362: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter in a members.asp, the 2 catid parameter in b articles.asp and c programs.asp, and the 3 id parameter in d hpages.asp and e forum.asp...

CVE-2005-4334

CVE-2005-4334 affects ZixForum 1.12, where an SQL injection flaw exists in the H_ID parameter used by zixforum/forum.asp and its references (Headforums.asp, Subject.asp). Exploitation would allow remote attackers to inject SQL commands. The available documents identify the vulnerable component (f...

CVE-2005-4334: Undefined Security Weakness

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the HID parameter to 1 zixforum/forum.asp, as used in 2 Headforums.asp and 3 Subject.asp...

CVE-2005-4256

Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...

CVE-2005-4256: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.asp in ASP-DEV XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via the forumtitle parameter. NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID. In addition, its accuracy is in...

CVE-2005-4259: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 TID parameter in topic.asp, 2 FORUMID parameter in forum.asp, and 3 PROFILEID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained...

CVE-2005-4165: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to forum.asp, 2 unspecified parameters to register.asp, and 3 the "Search For" field in search.asp...

CVE-2005-4141: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the 1 harf parameter in kullanicilistesi.asp and 2 baslik parameter in forum.asp...

CVE-2004-2212

SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2004-2212

The CVE-2004-2212 entry concerns a SQL injection in AliveSites Forums 2.0. Affected software/component: AliveSites Forums 2.0 (forum.asp). The vulnerability is exposed via the forum_id parameter, allowing remote attackers to execute arbitrary SQL commands. The provided documents confirm the root ...

CVE-2004-2212: Undefined Security Weakness

SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2005-1570: Undefined Security Weakness

forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability...

CVE-2005-1287: Undefined Security Weakness

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to member.asp, 2 forum parameter to forum.asp, or 3 various parameters in register.asp...

CVE-2004-1589

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...

CVE-2004-1589: Undefined Security Weakness

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...

CVE-2004-1588: Undefined Security Weakness

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the 1 QuestionNumber and Category parameters to Forum.asp or 2 Username and Password parameter to LoginExec.asp...

CVE-2004-1588

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the 1 QuestionNumber and Category parameters to Forum.asp or 2 Username and Password parameter to LoginExec.asp...

CVE-2004-1589

Cross-site scripting XSS vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the 1 Category parameter to Forum.asp or 2 MainMessageID parameter to ReplyToQuestion.asp...