CVE-2007-4116

CVE-2007-4116 describes a SQL injection in the PHP-based forum component of Metyus Forum Portal 1.0, specifically in the file philboard_forum.asp , where the attacker can send a crafted forumid parameter to execute arbitrary SQL commands. The provided description indicates remote exploitation and...

CVE-2007-4116

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4110

The CVE-2007-4110 entry describes an SQL injection in sign_in.aspx of a Message Board/Threaded Discussion Forum Application Template, allowing remote execution of arbitrary SQL via the Password parameter. The issue is caused by unsafely incorporated user input into SQL commands, exposing partial ...

CVE-2007-4110: Undefined Security Weakness

SQL injection vulnerability in signin.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...

CVE-2007-4116: Undefined Security Weakness

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

Code injection

Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to 1 forum.php, 2 cp.php, and possibly other unspecified components...

Snitz Forum < 3.4.0.08 SQL Injection

Binary data 5105.prm...

Message Board / Threaded Discussion Forum SQL INJECTION

A R I A - S E C U R I T Y Message Board / Threaded Discussion Forum SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

metyus-sql.txt

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql İnjection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Metyus Forum Portal v1.0

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql njection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection

source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

BSM Store Dependent Forums 1.02 - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975

CVE-2007-3975 is a Cross-site Scripting (XSS) vulnerability in Elite Forum 1.0.0.0, exploitable via the title parameter in a ptopic action on index.php. The public text in the connected documents confirms the vulnerability existence but does not provide concrete technical details beyond the param...

CVE-2007-3975

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

Elite Forum Full HTML ENject versin 1.0.0.0

c0ded: St@rExT From : Turkey exploit: titleElite Forum FULL HTML ENjocter-By St@rEXT/title style bodybackground:urlhttp://img523.imageshack.us/img523/7704/turkeyflag0xuhz9zc7uf0.jpg; color:FFFFFF; font-weight:bold; input background-color:darkred; color:FFFFFF; font-weight:bold; /style form...

Directory traversal

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourced...

CVE-2007-3942

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourced...