CVE-2006-2697

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

CVE-2006-2697

CVE-2006-2697 concerns SQL injection vulnerabilities in Easy-Content Forums 1.0. The affected components are the web scripts and parameters: startletter in userview.asp and forumname in topics.asp, where user-supplied input can be used to alter SQL queries. This is documented in the NVD descripti...

CVE-2006-2696

CVE-2006-2696 describes Cross-site scripting (XSS) in Easy-Content Forums 1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and (2) catid parameter in topics.asp. Public records indicate an impact on confidentia...

CVE-2006-2696: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 startletter parameter in userview.asp and the 2 catid parameter in topics.asp...

# MHG Security Team --- PHP NUKE All version Remote File Inc.

Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,Яy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS Vulnerable :...

CVE-2006-2697: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 startletter parameter in userview.asp and the 2 forumname parameter in topics.asp...

Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

Exploit for unknown platform in category web applications...

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities

Easy-Content Forums 1.0 - Multiple SQL Injection Cross-Site Scripting Vulnerabilities ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON--------------------------------------------------------...

Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities

No description provided by source. ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEX...

Easy-Content Forums 1.0 - Multiple SQL Injection / Cross-Site Scripting Vulnerabilities

ENGLISH Title : Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities Dork : "Copyright 2004 easy-content forums" Author : ajann Exploit; SQL INJECT.ON-------------------------------------------------------- http://target/path/userview.asp?startletter=SQL TEXT...

Type confusion

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

CVE-2006-2530

CVE-2006-2530 affects Avatar MOD 1.3 for Snitz Forums 3.4 (and possibly other versions). The issue arises in avatar_upload.asp where remote attackers can bypass file type checks and upload arbitrary files by inserting a null byte in the file name. This constitutes an input validation bypass in th...

aspbbXSS.txt

This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="alert'Xss Vulnerability'; http://www.example.com/profila.asp?get="alert'Xss Vulnerability';&URL=%2FDefault%2Easp%3F TeufeL // Netkabus.Com Research And Develop Group...

CVE-2006-2530: Undefined Security Weakness

avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...

[Full-disclosure] CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload

======================================================================== = CodeScan Advisory, codescan.com [email protected] = http://www.codescan.com/Advisories/CodeScanLabsAvatarMod.html = = Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload = = Vendor Website: =...

[Full-disclosure] HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...

Cmscout <= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...