Easynet Forum Host (topic.php) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================= Easynet Forum Host topic.php SQL Injection Vulnerbility ========================================================= Exploit Title: Easynet Forum Host topic.php SQL Injection...

Easynet4u Forum Host - topic.php SQL Injection

Easynet4u Forum Host - topic.php SQL Injection source: https://www.securityfocus.com/bid/38697/info Easynet4u Forum Host is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the applicatio...

Easynet4u Forum Host - 'topic.php' SQL Injection

source: https://www.securityfocus.com/bid/38697/info Easynet4u Forum Host is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

ABB v1.1 Forum Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================= ABB v1.1 Forum Remote Database Disclosure Vulnerability ======================================================= Affected Software : visialis:abbforum:1.1 + ABB v1.1 Forum Remote...

Todoo Forum 2.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================== Todoo Forum 2.0 Cross Site Scripting Vulnerability ================================================== + Note : Tribute to the martyrs of Gaza . ========== + Todoo Forum 2.0 xss Cross Site...

CVE-2009-4677

Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in phpFK PHP Forum ohne 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

Improper access control

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

Visialis ABB Forum 1.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for fpdb/abb.mdb...

CVE-2010-0939

The CVE-2010-0939 issue affects Visialis ABB Forum 1.1. It is caused by insufficient access control that allows remote attackers to access and download the database file fpdb/abb.mdb via a direct web request, exposing sensitive information stored under the web root. The available sources confirm ...

CVE-2009-4677

CVE-2009-4677 is an XSS vulnerability in the search.php of phpFK PHP Forum ohne 7.0.4. The issue allows remote attackers to inject arbitrary web script or HTML via the search parameter. The provided documents confirm the affected product/version and the vulnerable parameter (search). No explicit ...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2010-0938

The connected documents confirm CVE-2010-0938 is an XSS in TodoOforum/Todoo Forum 2.0, where the vulnerability is triggered via the id_forum parameter in a post action. Affected component: todooforum.php. Root cause: improper handling of input leading to arbitrary script/HTML injection. Impact: r...

Discuz! 6.0论坛uid参数远程跨站脚本漏洞

BUGTRAQ ID: 38484 Discuz!是一款华人地区非常流行的Web论坛程序。 Discuz!论坛没有正确的过滤提交给eccredit.php页面的uid参数，远程攻击者可以通过向论坛提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中注入并执行任意HTML和脚本代码。 Comsenz Discuz! 6.0 厂商补丁： Comsenz ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.comsenz.com/index.php...

Flying Forum personal space XSS vulnerability-vulnerability warning-the black bar safety net

Article author: knowledge seekers Version: ftbbs v7. 1static installation versionseems to be the latest Vulnerable page: usercenter. asp The vulnerability occurs in the blogmid filter is not strict lead to blogmid=Checkstrrequest. form"blogmid" if blogmid"" then sql="update "&ft&"clubuser set...

My Little Forum contact.php SQL Injection

Exploit for unknown platform in category web applications ========================================= My Little Forum contact.php SQL Injection ========================================= ----------------------------Information------------------------------------------------ +Name : my little forum...

My Little Forum - contact.php SQL Injection

My Little Forum - contact.php SQL Injection ----------------------------Information------------------------------------------------ +Name : my little forum contact.php SQL Injection +Autor : Easy Laster +Date : 02.03.2010 +Script : my little forum contact.php +Download : http://mylittleforum.net/...