CVE-2006-6532: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

Authentication flaw

VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsnstopicid cookie to the targeted topic...

CVE-2006-0160: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...

CVE-2003-0484

Cross-site scripting XSS vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topicid parameter...

CVE-2003-0486

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topicid parameter...

CVE-2003-0484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topicid parameter...

CVE-2003-0486: Undefined Security Weakness

SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topicid parameter...

phpBB password disclosure by sql injection

Hi There is sql injection vuln in phpBB. The variable "topicid" is passed directly from GET to sql query in /viewtopic.php. It can be used to get md5 passwords for users. I am attaching details and proof of concept code. I've only tested this on mysql 4 and pgsql at my home machines so I might ha...

phpBB 2.0.5 SQL Injection password disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== phpBB 2.0.5 SQL Injection password disclosure Exploit ===================================================== !/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql...