Mingle Forum 1.0.33.3 - fs-admin.php togroupusers Parameter XSS

The mingle-forum WordPress plugin was affected by a fs-admin.php togroupusers Parameter XSS security vulnerability...

Mingle Forum <= 1.0.33 - Cross Site Scripting

The mingle-forum WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Mingle Forum 1.0.33.3 - wpf.class.php Multiple Parameter SQL Injection

The mingle-forum WordPress plugin was affected by a wpf.class.php Multiple Parameter SQL Injection security vulnerability...

Mingle Forum <= 1.0.32.1 - Cross Site Scripting / SQL Injection

The mingle-forum WordPress plugin was affected by a Cross Site Scripting / SQL Injection security vulnerability...

Mingle Forum 1.0.33.3 - wpf.class.php search_words Parameter XSS

The mingle-forum WordPress plugin was affected by a wpf.class.php searchwords Parameter XSS security vulnerability...

Mingle Forum 1.0.35 - Privilege Escalation CSRF

The mingle-forum WordPress plugin was affected by a Privilege Escalation CSRF security vulnerability...

WP Forum Server 1.6.5 - feed.php topic Parameter SQL Injection

The WP Forum Server WordPress plugin was affected by a feed.php topic Parameter SQL Injection security vulnerability...

WP Forum Server <= 1.7.3 - wpf-insert.php edit_post_id Parameter SQL Injection

The WP Forum Server WordPress plugin was affected by a wpf-insert.php editpostid Parameter SQL Injection security vulnerability...

WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS

The WP Forum Server WordPress plugin was affected by a fs-admin/fs-admin.php Multiple Parameter XSS security vulnerability...

WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection

The WP Forum Server WordPress plugin was affected by an index.php Multiple Parameter SQL Injection security vulnerability...

WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS

The WP Forum Server WordPress plugin was affected by a fs-admin/wpf-add-forum.php groupid Parameter XSS security vulnerability...

Zingiri Forum 1.4.2 - forum.php zing_forum_output Function url Parameter XSS

The Forums WordPress plugin was affected by a forum.php zingforumoutput Function url Parameter XSS security vulnerability...

WordPress Simple Forum Plugin - File Upload

This plugin is prone to a remote file upload vulnerability. Solution Update the plugin...

Discuz 7.2 /search.php SQL注入漏洞

在文件/include/searchsort.inc.php150行@includeonce DISCUZROOT.'./forumdata/cache/threadsort'.$selectsortid.'.php'; 这个$selectsortid变量没有做过任何处理，而且最后进入到了170行的SQL语句$query = $db-query"SELECT tid FROM $tablepreoptionvalue$selectsortid ".$sqlsrch ? 'WHERE '.$sqlsrch : ''."";...

Joomla Kunena Forum 3.0.5 SQL Injection

Kunena forum extension for Joomla multiple SQL injection vulnerabilities Class: Input Validation Error CVE: N/A Remote: Yes Local: No Published: 02/07/2014 Credit: Raymond Rizk of Dionach [email protected] Vendor: Kunena Vulnerable: Kunena v3.0.5 Solution Status: Fixed by Vendor Kunena Forum is...

Joomla Kunena Forum 3.0.5 Cross Site Scripting

Kunena forum extension for Joomla multiple reflected cross-site scripting vulnerabilities Class: Input Validation Error CVE N/A Remote Yes Local No Published 02/07/2014 Credit Raymond Rizk of Dionach [email protected] Vendor Kunena Vulnerable Kunena v3.0.5 Solution Status: Fixed by Vendor Kunena...

CVE-2014-3553

mod/forum/classes/postform.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users...

'Tinba' Banking Malware Source Code Leaked Online

The source code for the smallest but sophisticated banking Trojan Tinba has been leaked through an online post in an underground forum, which make it available for anyone who knows where to look for free malware generation tools. The files posted on the closed russian underground forum turned out...

HDwiki论坛sql注射漏洞

简要描述： 0.0 详细说明： dz7.2注射。 漏洞证明： url:http://kaiyuan.hudong.com/bbs/ user:admin pass:9d05eabd2d70473f4fa686fcd6ea2071 mail:[email protected]...

ecshop_dz论坛注入可以绕过WAF

简要描述： 注入不是亮点，亮点在于绕过waf，专业绕waf，30年。 详细说明： 利用DZ本漏洞的特性，拆开sql语句。 http://bbs.ecshop.com/faq.php?action=grouppermission&gids99=%27&gids1000= and 1=updatexml1,concat0x5e24,/ &gids1010=/select user/ &gids1020=/,0x5e24,1%23 漏洞证明：...