CVE-2006-1111: Undefined Security Weakness

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "/" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection...

CVE-2006-1122: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2005-4670: Undefined Security Weakness

Cross-site scripting XSS vulnerability in message.php in CityPost Automated Link Exchange LNKX allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2005-4218: Undefined Security Weakness

SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585...

CVE-2005-4203

LogiSphere 0.9.9j is affected by CVE-2005-4203: an unrestricted ability to send messages via the msg command can be exploited remotely to cause denial of service by flooding the system with messages. Root cause: lack of restriction on the number of messages. The provided documents do not include ...

CVE-2005-4204: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this issue is distinct from the msg DoS...

CVE-2005-4203: Undefined Security Weakness

LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this...

CVE-2005-3941: Undefined Security Weakness

SQL injection vulnerability in blog.php in Orca Blog 1.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...

CVE-2005-3815: Undefined Security Weakness

SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...

PHPWebThings <= 1.4 (msg/forum) SQL Injection Exploit

No description provided by source. ?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQL injection / Administrative credentials disclosure and remote commands execution coded by rgod site: http://rgod.altervista.org based on http://secunia.com/advisories/17410/, but he...

CVE-2005-3496: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in PHP Handicapper allows remote attackers to inject arbitrary web script or HTML via the msg parameter to msg.php. NOTE: some sources identify a second vector in the login parameter to processsignup.php, but the original source says that it is for CRLF...

CVE-2004-2523

OpenFTPD affected: OpenFTPD 0.30.2 and earlier. The vulnerability is a format string flaw in the SITE MSG command’s msg.c (cat_message) that lets remote authenticated users execute arbitrary code via format specifiers in the message argument. This is a remote code execution risk with authenticati...

PT-2005-3982 · Php Fusion · Php-Fusion

SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158...

CVE-2005-2899: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in details.php in CjTagBoard 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 date, 2 time, 3 name, 4 ip, 5 agent, or 6 msg parameter...

CVE-2004-2191: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...

CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2002-1967: Undefined Security Weakness

Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service disconnect via a long 1 ctcp, 2 primsg, 3 msg, or 4 notice command...

CVE-2005-1283: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to 1 read arbitrary files via the UIDL parameter to the msg script or 2 copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than...

CVE-2005-0925: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

DEBIAN-CVE-2004-1484

Format string vulnerability in the msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message...