CVE-2007-4110

SQL injection vulnerability in signin.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter...

Message Board Threaded Discussion Forum - Sign_In.aspx SQL Injection

Message Board Threaded Discussion Forum - SignIn.aspx SQL Injection source: https://www.securityfocus.com/bid/25113/info Message Board / Threaded Discussion Forum is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL quer...

Message Board / Threaded Discussion Forum SQL INJECTION

A R I A - S E C U R I T Y Message Board / Threaded Discussion Forum SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

netvigilance-sa10.txt

netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...

dt_guestbook version 1.0f XSS vulnerability

netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...

awrate.com Message Board 1.0 - search.php Remote File Inclusion

awrate.com Message Board 1.0 - search.php Remote File Inclusion !/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code...

awrate.com Message Board 1.0 (search.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== awrate.com Message Board 1.0 search.php Remote Include Vulnerability ====================================================================== !/usr/bin/perl Portal Name :...

awrate.com Message Board 1.0 - 'search.php' Remote File Inclusion

!/usr/bin/perl Portal Name : awrate 1.0search.php Remote File Inclusion Exploit BUG: http://target/Path/search.php?toroot=http Vulnerable Code: includeonce"$toroot../commonphp/table.php.inc";; Bug Found DeltahackingTEAM Code :Dr.Trojan&Dr.Pantagon Download...

MHL-2006-003 Public Advisory: "mboard" file creation issue

MHL-2006-004 - Public Advisory +-----------------------------------------------------------+ | mboard Security Issue | +-----------------------------------------------------------+ PUBLISHED ON November 26th, 2006 PUBLISHED AT http://www.mayhemiclabs.com/advisories/MHL-2006-004.txt...

[SA19439] Cholod Mysql based message board Script Insertion and SQL Injection

TITLE: Cholod Mysql based message board Script Insertion and SQL Injection SECUNIA ADVISORY ID: SA19439 VERIFY ADVISORY: http://secunia.com/advisories/19439/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Cholod Mysql based message...

Sql injection

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1395

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1395

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1395

The CVE-2006-1395 entry concerns a SQL injection vulnerability in mb.cgi of the Cholod MySQL Based Message Board. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action (possibly via the username parameter), with CVSS considerations ind...

CVE-2006-1396

Technical details (affected product/component/version/root cause/exploit information) are not publicly available in the provided connected documents. Monitor for updates.

Cholod MySQL Based Message Board - Mb.cgi SQL Injection

Cholod MySQL Based Message Board - Mb.cgi SQL Injection source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

Cholod MySQL Based Message Board - 'Mb.cgi' SQL Injection

source: https://www.securityfocus.com/bid/17224/info MySQL Based Message Board is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

ScareCrow Message Board XSS vuln.

ScareCrow Message Board XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/scarecrow-message-board-xss-vuln.html vendor:http://scarecrow.sourceforge.net/ affected version:2.13 and prior Product Description: ScareCrow is a fully featured and...

ThWboard.txt

KAPDA New advisory Vendor: http://www.thwboard.de Vulnerable Version: 3 beta 2.8 Bug: HTML Injection , XSS , SQL Injection Exploitation: Remote with browser Description: -------------------- ThWboard is a freely available German PHP-based message board program that uses a MySQL database...