1629 matches found
msforums-xss.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 XSS in http://forums.microsoft.com/ - could lead to cookie/account stealing, information disclosure and more... Start e.g. here: http://forums.microsoft.com/Genuine/default.aspx?SiteID=25 Enter one of the following examples in searchbox of forum, the...
DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy
I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...
Sql injection
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...
CVE-2007-4095
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...
CVE-2007-4095
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...
CVE-2007-4095
CVE-2007-4095 describes an SQL injection in BSM Store Dependent Forums 1.02, likely via the FrmUserName parameter in login.asp (Username field). The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting data confidentiality, integrity, and potentially availability as ...
CVE-2007-4095: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp...
dependet-sql.txt
A R I A - S E C U R I T Y Dependet Forums Username Field RemotE SQL Injection DORK: Powered by: Dependent Forums v1.02 Insert Your SQL Injection Code into the Username field. For Example ' union select from members where member=1 Credits: Aria-Security Team http://aria-security.net...
Dependet Forums (Username Field) Remote SQL Injection
A R I A - S E C U R I T Y Dependet Forums Username Field RemotE SQL Injection DORK: Powered by: Dependent Forums v1.02 Insert Your SQL Injection Code into the Username field. For Example ' union select from members where member=1 Credits: Aria-Security Team http://aria-security.net...
BSM Store Dependent Forums 1.02 - Username SQL Injection
BSM Store Dependent Forums 1.02 - Username SQL Injection source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
CVE-2007-3812
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...
CMScout Forums.PHP SQL注入漏洞
CMScout是一款基于PHP的WEB应用程序。 CMScout不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Forums.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 CMScout 1.23 目前没有解决方案提供： http://www.cmscout.za.net/...
CVE-2007-3812
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...
CVE-2007-3416
Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...
CVE-2007-3416
Multiple cross-site request forgery CSRF vulnerabilities in the administration of 1 polls, 2 profiles, 3 IP bans, and 4 forums in a web-app.org WebAPP 0.8 through 0.9.9.6; and b web-app.net WebAPP 0.9.9.3.3, 0.9.9.3.4, and 2007; allow remote attackers to perform deletions as administrators...
Sql injection
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."...
CVE-2007-3244
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."...
CVE-2007-3244
CVE-2007-3244 describes a SQL injection in bbPress prior to version 0.8.1. The vulnerability is in bb-includes/formatting-functions.php and can allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, demonstrated by a PRE element (the “quirky slashe...
CVE-2007-3244: Undefined Security Weakness
SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."...