EUVD-2010-0963

Malware in sbrugna...

EUVD-2013-3473

Malware in sbrugna...

EUVD-2013-3472

Malware in sbrugna...

CVE-2013-3537

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

CVE-2013-3538

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

Sql injection

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3537

CVE-2013-3537 affects Todoo Forum 2.0 (todooforum.php). The vulnerability is multiple SQL injection via the id_post or pg parameters, enabling remote SQL command execution. Root cause: improper input handling allows injection. Impact: potential data disclosure/modification, depending on the DB. C...

CVE-2013-3537

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

CVE-2013-3538

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3538

CVE-2013-3538 describes multiple XSS vulnerabilities in Todoo Forum 2.0, specifically in the file todooforum.php via parameters (1) id_post or (2) pg. The NVD entry notes a MEDIUM severity (CVSS2 base score 4.3) with user interaction not required and partial integrity impact. Connected records co...

PT-2013-4468

Name of the Vulnerable Software and Affected Versions Todoo Forum version 2.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id post or pg parameters in the todooforum.ph...

CVE-2013-3537: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

CVE-2013-3538: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

PT-2013-4467

Name of the Vulnerable Software and Affected Versions Todoo Forum version 2.0 Description The issue concerns SQL injection vulnerabilities in the todooforum.php file. Remote attackers can execute arbitrary SQL commands by manipulating the id post or pg parameters. Recommendations For Todoo Forum...

Todoo Forum 2.0 Cross Site Scripting / SQL Injection

SQL Injection + Parameter : idpost + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=Injecthere&pg=1 + Parameter : pg + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=1&pg=InjectHere + Cross-site scripting + Parameter : idpost +...

Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities

Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

Todoo Forum 2.0 - todooforum.php Multiple SQL Injections

Todoo Forum 2.0 - todooforum.php Multiple SQL Injections source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials,...

Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...