CVE-2007-3234

SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-3234

CVE-2007-3234 describes a SQL injection vulnerability in the low.php script of Fuzzylime Forum 1.0 . The issue allows remote attackers to submit a crafted value for the topic parameter and execute arbitrary SQL commands. The CVSS metrics in the reference indicate a high base score (7.5) with netw...

CVE-2007-3234

SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-3235

CVE-2007-3235 is an XSS in Fuzzylime Forum 1.0, via the topic parameter in low.php. The vulnerability allows remote injection of arbitrary HTML/script. Root cause noted as possible linkage to SQL injection; no explicit exploit details or patch information are provided in the connected documents.

CVE-2007-3235

Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NOTE: this might be resultant from SQL injection...

уязвимости smf 1.1.2

Simple Machines Forum 1.1.2 http://www.simplemachines.org/ 1 слабая реализация звуковой капчи в этом движке звуковая капча реализуется посредством посылания браузеру звукового фала в формате WAV, файл создается путем склеивания произвольным образом нескольких файлов с разными звуками, и служит...

CVE-2007-3235: Undefined Security Weakness

Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML via the topic parameter. NOTE: this might be resultant from SQL injection...

Simple Machines Forum < 1.1.3 PHPSESSIONID Cookie Session Hijacking

Binary data 4101.prm...

CVE-2007-3234: Undefined Security Weakness

SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...

CVE-2007-3213

Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...

CVE-2007-3212

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

CVE-2007-3213

Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...

CVE-2007-3213

CVE-2007-3213 concerns the Sporum Forum before or equal to 3.0.9, where) cross-site scripting (XSS) flaws exist in the comments.cgi script. The vulnerability arises from the ability of an attacker to craft requests that inject arbitrary web script or HTML through the parameters “view” and “mode,”...

CVE-2007-3212

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

CVE-2007-3212

CVE-2007-3212 documents multiple XSS vulnerabilities in Beehive Forum 0.7.1, specifically in links.php. The issue arises in the (1) viewmode, (2) fid, and (3) sort_dir parameters, representing vectors distinct from CVE-2005-4460. The vulnerability affects Beehive Forum’s links.php handling and pe...

CVE-2007-3213: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...

CVE-2007-3212: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...

CVE-2007-3228: Undefined Security Weakness

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUMLIB parameter. NOTE: by default, access to the PhpDocumentor directory tree...