XXS in Powered by vbzoom

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...

VBZoom 1.11 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19803/info VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context o...

VBZooM <=V1.11 "sub-join.php" SQL Injection

======================================= Discovered By: C.B.B.L CrAzY CrAcKeR,Breeeeh,BoNy-m,LiNuX rOOt ======================================= Search: POWERED BY VBZooM V1.11 Example:- /sub-join.php?UserID=SQL Injection...

VBZooM <=V1.11 " reply.php" SQL Injection

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- POWERED BY: VBZooM V1.11 Example:- /reply.php?UserID=SQL njection...

VBZooM <=V1.11 " ignore-pm.php" SQL Injection

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- POWERED BY: VBZooM V1.11 Example:- ignore-pm.php?UserID=SQL Injection ===========================================...

VBZooM "sendmail.php" SQL Injection

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Example:- /sendmail.php?UserID=SQL Injection ===========================================...

CVE-2006-3691

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to 1 ignore-pm.php, 2 sendmail.php, 3 reply.php or 4 sub-join.php...

CVE-2006-3691

CVE-2006-3691 affects VBZooM 1.11 and earlier. The vulnerability arises from multiple SQL injection flaws exposed through the UserID parameter in four scripts: ignore-pm.php, sendmail.php, reply.php, and sub-join.php. The root cause is improper sanitization of the UserID value leading to arbitrar...

CVE-2006-3691

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to 1 ignore-pm.php, 2 sendmail.php, 3 reply.php or 4 sub-join.php...

CVE-2006-3691: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to 1 ignore-pm.php, 2 sendmail.php, 3 reply.php or 4 sub-join.php...

vbzoomSQL3.txt

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- POWERED BY: VBZooM V1.11 Example:- ignore-pm.php?UserID=SQL Injection ===========================================...

vbzoomSQL2.txt

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- POWERED BY: VBZooM V1.11 Example:- /reply.php?UserID=SQL njection...

vbzoomSQL.txt

======================================= Discovered By: C.B.B.L CrAzY CrAcKeR,Breeeeh,BoNy-m,LiNuX rOOt ======================================= Search: POWERED BY VBZooM V1.11 Example:- /sub-join.php?UserID=SQL Injection...

CVE-2006-3239

SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter...

CVE-2006-3238

Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 MemberID parameter to rank.php, and the 2 QuranID parameter to lng.php...

CVE-2006-3238

Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 MemberID parameter to rank.php, and the 2 QuranID parameter to lng.php...

CVE-2006-3239

The CVE-2006-3239 entry concerns VBZooM

CVE-2006-3238

VBZooM prior to version 1.00 is affected by multiple SQL injection vulnerabilities. Specifically, remote attackers can cause arbitrary SQL execution via the MemberID parameter to rank.php and the QuranID parameter to lng.php. The root cause is unsafely used input parameters that are used in SQL q...

CVE-2006-3239

SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter...

CVE-2006-3238: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 MemberID parameter to rank.php, and the 2 QuranID parameter to lng.php...