EUVD-2007-4100

Malware in sbrugna...

Metyus Forum Portal 1.0 Philboard_Forum.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Metyus Forum Portal Philboard_Forum.ASP SQL注入漏洞

BUGTRAQ ID: 25096 CNCAN ID:CNCAN-2007080105 Metyus Forum Portal是一款基于ASP的WEB应用程序。 Metyus Forum Portal不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'PhilboardForum.ASP'脚本对用户提交的'forumid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Metyus Forum Portal 1.0 目前没有解决方案提供： http://aspindir.com/...

CVE-2007-4116

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

Sql injection

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4116

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

CVE-2007-4116

CVE-2007-4116 describes a SQL injection in the PHP-based forum component of Metyus Forum Portal 1.0, specifically in the file philboard_forum.asp , where the attacker can send a crafted forumid parameter to execute arbitrary SQL commands. The provided description indicates remote exploitation and...

CVE-2007-4116: Undefined Security Weakness

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

metyus-sql.txt

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql İnjection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Metyus Forum Portal v1.0

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql njection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection

source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...