RunCMS 2ma - 'post.php' SQL Injection

query$sql redirectheader"index.php", 2, MDCANTGETFORUM; exit; ... 'forum' variable is taken from $POST array and inserted in a sql query without prior santization and without being surrounded by quotes. Then you can subsequently manipulate this query in /modules/forum/class/class.permissions.php ...

MiniShare HTTP 1.5.5 BoF

No description provided by source. / MiniShare HTTP Server 1.5.5 Remote Buffer overflow Exploit by eMP3R0r TEAM This bug Expl0ited and Discovered by iM4n Sp Tnx2 : Shabgard & Aria Security FOrum The Crimson Idol / include winsock2.h include stdio.h include string.h include stdlib.h include dos.h...

MiniShare 1.5.5 - Remote Buffer Overflow

MiniShare 1.5.5 - Remote Buffer Overflow / MiniShare HTTP Server 1.5.5 Remote Buffer overflow Exploit by eMP3R0r TEAM This bug Expl0ited and Discovered by iM4n Sp Tnx2 : Shabgard & Aria Security FOrum The Crimson Idol / include include include include include pragma commentlib, "ws232.lib" define...

WordPress WP Forum Server Plugin <= 2.3 - Multiple SQL Injection

Because of these vulnerabilities, the attackers can execute arbitrary SQL commands. Solution Update the plugin...

Move the net Forum DvBBS boardrule. php module SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected system: Move the net Forum Dvbbs php 2.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 3 6 2 8 2 DVBBS is a Aspsky. Net development and maintenance of open source ASP Web forum program. DvBBS does not properly filter user...

vBulletinR Version 3.8.2 Denial of Service Exploit

No description provided by source. !usr/bin/perl vBulletinR Version 3.8.2 D3n14l 0f S3rv1c3 Expl01t HaCker Anger - [email protected] Modules use IO::SOCKET; Object interface if @ARGV1 print" Author : Hacker Anger TeaM : The Assassin Scorpion TeaM Home : http://Baloma.NeT Mail : [email protected]...

CVE-2009-3436

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

Sql injection

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

CVE-2009-3436

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

WP Forum < 2.4 - Multiple SQL Injection

The wp-forum WordPress plugin was affected by a Multiple SQL Injection security vulnerability...

Four of the General government, CMS management system vulnerability-vulnerability warning-the black bar safety net

This article has been published in the hack Defense 2 0 0 9. 5 period of,reproduced be sure to keep this information QQ friends of small building to listen to rain to say their school site is using the four through the government grid is set, let me check its safety. Just the hands on work done,...

Rookie Academy of crack Session cookie method-vulnerability warning-the black bar safety net

The so-called session cookies, is a platform in you after a successful login, a cookie that indicates you have passed verification, but with the General cookie is different, he will not be there on your hard drive, that is to say: before you leave the browser, it will disappear, which means: the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

CVE-2009-3204

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in ULoKI PHP Forum 2.1 allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2009-3204

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

CVE-2009-3202

CVE-2009-3202 describes a cross-site scripting (XSS) vulnerability in the search.php component of ULoKI PHP Forum 2.1. The issue allows remote attackers to inject arbitrary web script or HTML via the term parameter, potentially affecting users who interact with search results. The available detai...

CVE-2009-3204

CVE-2009-3204 affects Stiva Forum 1.0 with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via the id parameter to demo.php and forum.php , and via PATH_INFO to include_forum.php . NVD lists a CVSS v2 base score of 4.3 (MEDIUM) , with partial integrity imp...

CVE-2009-3186

Multiple cross-site scripting XSS vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to forum.php, 2 profilename parameter to profile.php, and 3 p parameter to view.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in VideoGirls BiZ allow remote attackers to inject arbitrary web script or HTML via the 1 t parameter to forum.php, 2 profilename parameter to profile.php, and 3 p parameter to view.php...