Sql injection

Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...

CVE-2008-6144

Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...

CVE-2008-6145

Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6145

The CVE-2008-6145 entry concerns the TYPO3 WEC Discussion Forum (wec_discussion) extension, version 1.7.0 and earlier. The root cause is multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The impact is remote code-like dat...

Vlinks 1.1.6 (id) Remote SQL Injection Vulnerability

No description provided by source. !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/vlinks-v1.1.6.rar Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM/Forum langague arabic Notes : 3arabi Muslim Maghribi...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...

CVE-2009-0499

Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...

CVE-2009-0499

CVE-2009-0499 is a CSRF vulnerability in Moodle forum code (affecting Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4) that allows remote attackers to delete unauthorized forum posts via a crafted link or IMG tag to post.php. The issue stems from cross-site request forgery in foru...

CVE-2009-0499

Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...

CVE-2009-0487

Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...

CVE-2009-0487

Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...

CVE-2009-0487

Cross-site scripting XSS vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post...

CVE-2009-0499

Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...

SMF 1.1.7 Persistent XSS (requires permision to edit censor)

SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

YapBB 1.2 - 'forumID' Blind SQL Injection

--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...

SMF 1.1.7 Cross Site Scripting

SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...

Simple Machines Forum (SMF) 1.1.7 - [url] Tag HTML Injection

Simple Machines Forum SMF 1.1.7 - url Tag HTML Injection source: https://www.securityfocus.com/bid/33595/info Simple Machines Forum is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...