CVE-2009-3703

CVE-2009-3703 concerns the WordPress WP-Forum plugin (

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

P forum vulnerable to directory traversal

Overview P forum from Rocomotion contains a directory traversal vulnerability. P forum from Rocomotion is a bulletin board software. P forum contains a directory traversal vulnerability. Shuya Ueki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

[ISecAuditors Security Advisories] WP-Forum <= 2.3 SQL Injection vulnerabilities

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

Zen Cart Information Disclosure Vulnerability (Dec 2009) - Active Check

Zen Cart is prone to an information disclosure vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 -...

DigitalHive Shell Upload

| | DigitalHive Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download :http://www.digitalhive.com/base.php?page=site/telechargements.php&var=accueil - | | Exp: | | 1- First signup in the forum by going here...

Invision Power Board < 3.0.5 Multiple Vulnerabilities

The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...

JVN#00152874 P forum vulnerable to directory traversal

P forum from Rocomotion is a bulletin board software. P forum contains a directory traversal vulnerability. Impact A remote attacker could view an arbitrary file on the server. Solution Update the Software Update to the latest version according to the information provided by the developer. This...

Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.comhttp://gmail.com Date: 11. December 2009...

Sql injection

SQL injection vulnerability in mainforum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-4263

SQL injection vulnerability in mainforum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-4263

CVE-2009-4263 concerns a SQL injection in PTCPay GeN3 forum 1.3, exploitable via the cat parameter in main_forum.php. The affected software is PTCPay GeN3 forum (version 1.3) and the vulnerability arises from improper handling of input leading to arbitrary SQL execution. The documented impact is ...

SA permissions are nine kinds of upload methods-vulnerability warning-the black bar safety net

SA rights is very large,but may be some friends feel inconvenient to use,the next and everyone together to discuss several Upload File method,if there's another way,I hope you made,the technology,the more the defense plays, the more bright the higher. First, NBSI command method:write the word woo...

GeN3 Forum 1.3 SQL Injection

view source print? Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE AAAAAA M M N NN...

SiSplet CMS 2008-01-24 - Multiple Remote File Inclusions

SiSplet CMS 2008-01-24 - Multiple Remote File Inclusions SiSplet CMS 3rr0r 2: ./SiSplet-2008-01-24/main/forum/komentar.php line 3 PoC : http://target/path/main/anketa/new.php?sitepath=Shell http://target/path/main/forum/komentar.php?sitepath=Shell Contact Me : cr4wl3r4tlinuxmaildotorg...

Simple Machines Forum < 1.1.11 Multiple Vulnerabilities

Binary data 5250.prm...

GeN3 forum 1.3 - SQL Injection

Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE AAAAAA M M N NNN A A S TT E A A M ...

GeN3 forum V1.3 SQL Injection Vulnerability

No description provided by source. Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE...