8133 matches found
CVE-2007-6657
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6667
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...
CVE-2007-6667
The CVE-2007-6667 entry describes an SQL injection in MyPHP Forum 3.0 and earlier, exploitable via the id parameter in faq.php. The vulnerability allows remote execution of arbitrary SQL commands, with the attack surface limited to the FAQ handling path; the note indicates the member.php vector i...
CVE-2007-6657
Affected product: Mihalism Multi Forum Host 3.0.x and earlier. The vulnerability is a PHP remote file inclusion in load_forum.php triggered by a URL in the mfh_root_path parameter, allowing remote code execution. The CVSS-based assessment in the linked NVD entry indicates a HIGH base score (7.5) ...
CVE-2007-6657
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6657: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6667: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
No description provided by source. ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= MyPHP Forum | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008...
MyPHP Forum 3.0 - search.php Multiple SQL Injections
MyPHP Forum 3.0 - search.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27118/info MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...
MyPHP Forum 3.0 - Final SQL Injection
MyPHP Forum 3.0 - Final SQL Injection ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public...
myphp30-sql.txt
================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...
MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/27118/info MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...
MyPHP Forum 3.0 - 'Final' SQL Injection
================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...
MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities
No description provided by source. Name : MyPHP Forum = 3.0 Final Multiple Remote SQL Injection Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.myphp.ws/ Date : 31/12/2007 Dork : "Powered by: MyPHP Forum" Note: For work, magicquotesgpc must ...
IPTBB <= 0.5.4 (viewdir id) Remote Sql Injection Vulnerability
No description provided by source. --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql Injection ---------------------------------------------------------------...
MyPHP Forum 'faq.php' and 'member.php' Multiple SQL Injection Vulnerabilities
MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in t...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...