CVE-2007-0826: Undefined Security Weakness

SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2006-5629

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in 1 DisableForum.asp and 2 enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and...

CVE-2006-5629

Summary of CVE-2006-5629 (CVELIST/NVD) : The vulnerability affects Hosting Controller 6.1 before Hotfix 3.3. It arises from inadequate sanitization of the ForumID parameter in two ASP scripts, EnableForum.asp and DisableForum.asp, allowing an unauthenticated attacker to inject SQL via the ForumID...

CVE-2006-5630

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to 1 delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and 2 create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum...

CVE-2006-5629: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in 1 DisableForum.asp and 2 enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and...

Hosting Controller Multiple Script ForumID Parameter SQL Injection

The installed version of Hosting Controller fails to sanitize input to the 'ForumID' parameter of the 'forum/HCSpecific/EnableForum.asp' script before using it in database queries. An unauthenticated attacker may be able to leverage this issue to manipulate database queries to reveal sensitive...

CVE-2006-3309: Undefined Security Weakness

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit SPT 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2006-2835: Undefined Security Weakness

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 forumid parameter in add.php and 2 lessid parameter in show.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

CVE-2006-2757

Cross-site scripting XSS vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the 1 start parameter in a index.php; 2 forumID parameter in index.php, b newtopic.php, and c reply.php; and 3 ID parameter to d edit.php...

Sql injection

SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter...

CVE-2006-0154

SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter...

CVE-2006-0154

SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter...

CVE-2006-0154: Undefined Security Weakness

SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter...

[SA18354] 427BB Multiple Vulnerabilities

TITLE: 427BB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18354 VERIFY ADVISORY: http://secunia.com/advisories/18354/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: 427BB 2.x http://secunia.com/product/4730/...

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

CVE-2005-4078

Multiple cross-site scripting XSS vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 forumID, 2 boardID, and 3 topicRepeater1-p parameters in topics.aspx, 4 boardID parameter in categoryindex.aspx, 5 postID parameter in...

CVE-2005-4071: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ForumID parameter in viewforum.cfm, and 2 ForumID, 3 Thread, and 4 ThreadID parameters in viewthread.cfm...

CVE-2005-3514: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML via the forumID parameter to 1 newtopic.php, 2 quote.php, 3 index.php, and 4 reply.php...

CVE-2005-3363: Undefined Security Weakness

SQL injection vulnerability in Saphp Lesson, possibly saphp Lesson1.1 and saphpLesson2.0, allows remote attackers to execute arbitrary SQL commands via the forumid parameter in 1 showcat.php and 2 add.php...