Wizz Forum ForumReply.php TopicID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

CVE-2007-4457: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...

CVE-2005-3682: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Wizz Forum 1.20 allow remote attackers to execute arbitrary SQL commands via 1 the AuthID parameter in ForumAuthDetails.php, and the TopicID parameter in 2 ForumTopicDetails.php and 3 ForumReply.php...