CVE-2006-1666

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...

CVE-2006-1666

CVE-2006-1666 describes a SQL injection vulnerability in the forum.php component of Arab Portal 2.0.1 stable. The issue allows remote attackers to inject and execute arbitrary SQL commands through the mineID parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH), with network attack ve...

CVE-2006-1666: Undefined Security Weakness

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter...

CVE-2006-1665: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

Design/Logic Flaw

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incstat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-0094

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incstat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-0094

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incstat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-0094: Improper Control of Generation of Code

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incstat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Remote file inclusion

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2006-0076

This CVE (CVE-2006-0076) relates to oaBoard 1.0: a PHP remote file inclusion flaw in forum.php where an input parameter inc can be controlled via URL to include a PHP file. The underlying issue is unsafely including external input as code, enabling arbitrary PHP execution if a remote file is incl...

CVE-2006-0076: Undefined Security Weakness

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2005-4365: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter in text.php and 2 frame parameter in forum.php...

CVE-2005-4218

PHPWebThings 1.4 is affected by a SQL injection in forum.php via the msg parameter. The root cause is improper input sanitization in the forum.php handler, enabling an attacker to modify or exfiltrate data through crafted SQL. OpenVAS note indicates that remote attackers could potentially access ...

CVE-2005-4226: Undefined Security Weakness

Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via 1 the ref parameter in download.php, 2 the direction, msg, sforum, reason, subname, and toform parameters in forum.php, 3 the msg and forum parameters ...

CVE-2005-4218: Undefined Security Weakness

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585...

CVE-2005-3872

The CVE-2005-3872 entries describe multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands through parameters in forum.php (FORUM_ID) and topic.php (TOPIC_ID, FORUM_ID, CAT_ID). Affected software: Ugroup 2.6.2 and earl...

CVE-2005-3872: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID parameter in forum.php, and the 2 TOPICID, 3 FORUMID, and 4 CATID parameters in topic.php...

Ugroup 2.6.2 SQL inj. vuln.

Ugroup 2.6.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/ugroup-262-sql-inj-vuln.html Vendor:http://www.realsoftstudio.com/Ugroup/ affected version:2.6.2 and prior Product Description: A Software discussion platform written in PH...

UGroup 2.6.2 - 'forum.php?FORUM_ID' SQL Injection

source: https://www.securityfocus.com/bid/15591/info UGroup is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

UGroup 2.6.2 - forum.php?FORUM_ID SQL Injection

UGroup 2.6.2 - forum.php?FORUMID SQL Injection source: https://www.securityfocus.com/bid/15591/info UGroup is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...