CVE-2009-4783: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to execute arbitrary SQL commands via the start parameter to 1 forum.php and 2 thread.php in community/, and 3 blog/index.php...

CVE-2009-4782: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or HTML via the 1 start, 2 forum, and 3 cat parameters to community/thread.php; 4 start and 5 cat parameters to community/forum.php; and 6 start parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

CVE-2009-4649

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

CVE-2009-4649

GeccBBlite 0.1 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the postatoda parameter to rispondi.php and scrivi.php, with improper handling in forum.php. The NVD/NVD-derived entry lists a CVSS v2 ba...

CVE-2009-4649

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

CVE-2009-4649: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

Triburom - forum.php Cross-Site Scripting

Triburom - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40316/info Triburom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

CVE-2009-4547

Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...

CVE-2009-4547: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

CVE-2009-3204: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

CVE-2009-3186: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to forum.php, 2 profilename parameter to profile.php, and 3 p parameter to view.php...

VideoGirls BiZ Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || VideoGirls BiZ Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.videogirls.biz/ Greetings : Mizoz, Zuka,...

Stiva Forum 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Stiva FORUM 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.stivaforum.com/ Greetings : Mizoz, Zuka,...

Sql injection

SQL injection vulnerability in forum.php in Arab Portal 2.x, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666...

CVE-2009-2781

CVE-2009-2781 describes an SQL injection in Arab Portal 2.x/forum.php where remote authenticated users can inject via the qc parameter in an addcomment action (when magic_quotes_gpc is disabled). This is a distinct vector from CVE-2006-1666. Affected: Arab Portal 2.x/2.0.1 stable forum.php compon...

CVE-2009-2781: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forum.php in Arab Portal 2.x, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the qc parameter in an addcomment action, a different vector than CVE-2006-1666...

Arab Portal 2.x SQL Injection

getqc &&!isset$apt-getqp $qc = $apt-getqc; $result = $apt-query"select name,comment from rafiacomment where id='$qc'"; $row = $apt-dbarray$result; $apt-row'quote' = "\n\n\nQUOTE..... :".$row'name'."\n".$row'comment'."/QUOTE"; /code - Debug : code $qc = intval$apt-getqc; /code - Note : Path to...

Arab Portal v2.x (forum.php qc) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Arab Portal v2.x forum.php qc Remote SQL Injection Exploit ============================================================ getqc &&!isset$apt-getqp $qc = $apt-getqc; $result =...