Sql injection

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

CVE-2007-5992

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

freeforums-sql.txt

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

CVE-2007-5992: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

Code injection

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

Free Forums "search" Sql Injection

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

CVE-2002-2398

The vulnerability CVE-2002-2398 affects APBoard versions 2.02 and 2.03, where the new thread posting page allows remote attackers to post messages in protected forums by modifying the insertinto parameter. This is the only detail available in the provided documents; no root cause, affected file/f...

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...

Sql injection

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

CVE-2007-5688

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

CVE-2007-5688

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

CVE-2007-5688

CVE-2007-5688: Multiple SQL injection vulnerabilities in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3 for phpBB/IPB, in directory.php, allow remote attackers to execute arbitrary SQL via the (1) go and (2) cat parameters. Affected software is the Multi-Forums module version 1.3.3; roo...

CVE-2007-5688: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

Multi-Forums - Directory.php Multiple SQL Injections

Multi-Forums - Directory.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allo...

Multi-Forums - 'Directory.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise the application, access o...

CVE-2007-5676

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

CVE-2007-5676

CVE-2007-5676 relates to a PHP remote file inclusion in PHP-Nuke Platinum 7.6.b.5, specifically in modules/Forums/favorites.php. The underlying issue allows an attacker to execute arbitrary PHP code via a URL supplied to the nuke_bb_root_path parameter, enabling remote code execution. The affecte...