CVE-2008-1939

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...

CVE-2008-1939

Concrete details show SQL injection vulnerabilities in W1L3D4 Philboard components across multiple versions (e.g., 0.5, 1.0, 1.14, 1.2) via user-supplied parameters (forumid, id, topic) in various ASP scripts (admin/ paths and forum/ paths). The root cause is improper handling of input leading to...

CVE-2008-1939: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...

W1L3D4 Philboard 1.0 (philboard_reply.asp) SQL Injection Vulnerability

No description provided by source. Philboard W1L3D4 v1.0 Multiple SQL njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

philboard1-sql.txt

Philboard W1L3D4 v1.0 Multiple SQL İnjection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection

Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

W1L3D4 Philboard 1.0 (philboard_reply.asp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== W1L3D4 Philboard 1.0 philboardreply.asp SQL Injection Vulnerability ====================================================================== Philboard W1L3D4 v1.0 Multipl...

W1L3D4 philboard 1.0 - philboard_reply.asp SQL Injection

W1L3D4 philboard 1.0 - philboardreply.asp SQL Injection Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2:...

Metyus Forum Portal Philboard_Forum.ASP SQL注入漏洞

BUGTRAQ ID: 25096 CNCAN ID:CNCAN-2007080105 Metyus Forum Portal是一款基于ASP的WEB应用程序。 Metyus Forum Portal不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'PhilboardForum.ASP'脚本对用户提交的'forumid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Metyus Forum Portal 1.0 目前没有解决方案提供： http://aspindir.com/...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Cross site scripting

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4024

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4024

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-4024

CVE-2007-4024 is a reported XSS vulnerability affecting W1L3D4 Philboard 0.3, specifically in the W1L3D4_aramasonuc.asp script, where an attacker can inject arbitrary script via the searchterms parameter. The available documents only state a cross-site scripting flaw; they do not provide details ...

CVE-2007-4024: Undefined Security Weakness

Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

W1L3D4 philboard 0.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/25055/info W1L3D4 Philboard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

W1L3D4 philboard 0.3 - Cross-Site Scripting

W1L3D4 philboard 0.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/25055/info W1L3D4 Philboard is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

philboard-xss.txt

------=Part11316726183988.1185316931798 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline W1L3D4 Philboard v0.3 XSS Vulnerability Software: W1L3D4 Philboard v0.3 download: http://www.aspindir.com/goster/4891 demo:...

Sql injection

SQL injection vulnerability in W1L3D4bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920...

CVE-2007-2641: Undefined Security Weakness

SQL injection vulnerability in W1L3D4bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920...