CVE-2006-0123

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the 1 fid parameter in index.php and 2 pagid parameter in verpag.php, and possibly other vectors...

CVE-2006-0124

Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...

CVE-2006-0123

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the 1 fid parameter in index.php and 2 pagid parameter in verpag.php, and possibly other vectors...

CVE-2006-0123

CVE-2006-0123 involves multiple SQL injection vulnerabilities in ADN Forum 1.0b. The affected component is the forum software, with the vulnerable entry points identified as the fid parameter in index.php and the pagid parameter in verpag.php (and possibly other vectors). The root cause is unsafe...

CVE-2006-0124

CVE-2006-0124 describes a cross-site scripting (XSS) vulnerability in the ADN Forum 1.0b product, specifically in the crear.php script. The issue arises from the titulo parameter, used for the “Topic name” field, allowing remote attackers to inject arbitrary web script or HTML. The available reco...

CVE-2006-0123: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the 1 fid parameter in index.php and 2 pagid parameter in verpag.php, and possibly other vectors...

CVE-2006-0124: Undefined Security Weakness

Cross-site scripting XSS vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field...

CVE-2006-0094

CVE-2006-0094 describes a PHP remote file include in oaBoard 1.0, specifically in forum.php via the inc_stat parameter, enabling remote attackers to execute arbitrary PHP code. The connected documents confirm oaBoard 1.0 as affected and do not provide remediation details. No exploits or fixed ver...

CVE-2005-4619

CVE-2005-4619 affects Zorum Forum 3.5 and earlier (index.php showhtmllist) where the rollid parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. This is documented as a SQL injection vulnerability in Zorum/phpoutsourcing code; no patch/version det...

CVE-2005-4619

SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method...

CVE-2005-4619: Undefined Security Weakness

SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid parameter in the showhtmllist method...

CVE-2006-0076

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

[eVuln] VEGO Web Forum SQL Injection Vulnerability

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

EV0001.txt

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

phpBB < 2.0.19 Multiple XSS

According to its version number, the remote version of this software is vulnerable to JavaScript injection issues using 'url' bbcode tags and, if HTML tags are enabled, HTML more generally. This may allow an attacker to inject hostile JavaScript into the forum system to steal cookie credentials o...

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

CVE-2006-0065

CVE-2006-0065 describes an SQL injection vulnerability in VEGO Web Forum versions up to and including 1.26, affecting (1) functions.php, (2) functions_update.php, and (3) functions_display.php. The flaw allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index....

CVE-2006-0065: Undefined Security Weakness

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

[SA18273] VEGO Web Forum &quot;theme_id&quot; SQL Injection Vulnerability

TITLE: VEGO Web Forum "themeid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18273 VERIFY ADVISORY: http://secunia.com/advisories/18273/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VEGO Web Forum 1.x http://secunia.com/product/6722/ DESCRIPTION:...