CVE-2008-3200

CVE-2008-3200 affects Avlc Forum via SQL injection in the vlc_forum.php script, specifically the affich_message action using the id parameter. Root cause: improper handling of user-supplied id leads to arbitrary SQL execution. Impact: remote attacker could read/modify data and affect other databa...

CVE-2008-3200

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

Design/Logic Flaw

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...

CVE-2008-2583

CVE-2008-2583 affects Oracle Portal’s sample Discussion Forum Portlet (Oracle Application Server 10g). The vulnerability resides in the Discussion Forum Portlet distributed via OTN prior to 20080715, enabling remote exploitation over a network with unknown impact per the initial description, but ...

CVE-2008-2583

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...

Avlc Forum 'vlc_forum.php' SQL注入漏洞

BUGTRAQ ID: 30202 CNCAN ID：CNCAN-2008071503 Avlc Forum是一款基于PHP的WEB应用程序。 Avlc Forum不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'vlcforum.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Avlc Forum 目前没有解决方案提供： http://www.easy-script.com/scripts-PHP/avlc-forum-2147.html...

avlc-sql.txt

==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...

PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================= PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability ============================================================= exploit usage :...

Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability

No description provided by source. ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

Avlc Forum - vlc_forum.php SQL Injection

Avlc Forum - vlcforum.php SQL Injection ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, |...

Avlc Forum - 'vlc_forum.php' SQL Injection

==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...

Cross site scripting

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

Design/Logic Flaw

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

CVE-2008-3072

CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...

CVE-2008-3073

CVE-2008-3073 affects Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13. Description indicates unknown impact and attack vectors, probably cross-site scripting (XSS) related to “use of the html-tag.” NVD CVSS2 base score 7.5 (HIGH) with network vector and low complexity; part...

CVE-2008-3072

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...