532 matches found
CVE-2008-5270
SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to execute arbitrary SQL commands via the board parameter...
MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== MyPHP Forum = 3.0 Edit Topics/Blind SQL Injection Vulnerabilities ================================================================== /...
MyPHP Forum 3.0 - Edit Topics Blind SQL Injection
MyPHP Forum 3.0 - Edit Topics Blind SQL Injection / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------...
MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection
/ ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By StAkeRathotmaildotit Download On...
CVE-2008-4614
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
CVE-2008-4076
CVE-2008-4076 is an XSS vulnerability affecting multiple Tor World CGI-based products (Tor Board 1.3 and earlier; Topics BBS 1.11 and earlier; Simple BBS 1.86 and earlier; Interactive BBS 1.57 and earlier). Public sources describe an ability for remote attackers to inject arbitrary script/HTML in...
CVE-2008-4076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...
JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution
Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product. This vulnerability is...
QuickTicket <= 1.5 (qti_usr.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== QuickTicket if isset$GET'id' $id = $GET'id'; // -- COUNT TOPICS -- $oDB-Query'SELECT countid as countid FROM '.TABTOPIC.' WHERE firstpostuser='.$id; // -- COUNT MESSAGES --...
QuickTicket 1.5 - qti_usr.php SQL Injection
QuickTicket 1.5 - qtiusr.php SQL Injection Script name: QuickTicket Site: http://www.qt-cute.org Vulnerability: remote sql injection at qtiusr.php Download: v 1.4: http://www.qt-cute.org/download/qti14.zip v 1.5.0.3: http://www.qt-cute.org/download/qti15.zip Vulnerable code: 1.4 ; 1.5 is pretty t...
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...
Sql injection
SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676...
CVE-2007-3938: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676...
PT-2007-5158 · Maxdev · Maxdev Md-Pro
Name of the Vulnerable Software and Affected Versions: MAXdev MDPro MD-Pro versions 1.0.8x and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module. Recommendations: For MAXdev MDPro MD-Pro version...
Md-Pro 1.0.8x - Topics topicid SQL Injection
Md-Pro 1.0.8x - Topics topicid SQL Injection !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Site: http://www.maxdev.com Download: http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml Dork: "Powered by Md-Pro" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
Md-Pro <= 1.0.8x (Topics topicid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Md-Pro = 1.0.8x Topics topicid Remote SQL Injection Vulnerability ====================================================================...
Md-Pro <= 1.0.8x (Topics topicid) Remote SQL Injection Vulnerability
No description provided by source. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Site: http://www.maxdev.com Download: http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml Dork: "Powered by Md-Pro" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
Md-Pro 1.0.8x - Topics topicid SQL Injection
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Site: http://www.maxdev.com Download: http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml Dork: "Powered by Md-Pro" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...
CVE-2007-1965
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...