CVE-2006-0175

CVE-2006-0175 is an XSS in Web Wiz Forums 6.34 where the search parameter processed by search_form.asp can inject arbitrary script/HTML. Affected component: the search parameter handling in Web Wiz Forums 6.34. Exploitation details in the connected sources are limited to a remote attacker inducin...

CVE-2005-4606

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...

CVE-2005-4606

CVE-2005-4606 describes an SQL injection in Web Wiz apps (Site News 3.06 and earlier; Journal 1.0 and earlier; Polls 3.06 and earlier; Database Login 1.71 and earlier) via txtUserName in admin/check_user.asp. Attacker can execute arbitrary SQL commands remotely. Exploitation details, affected ver...

[SA18263] Web Wiz Products "txtUserName" SQL Injection Vulnerability

TITLE: Web Wiz Products "txtUserName" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18263 VERIFY ADVISORY: http://secunia.com/advisories/18263/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Web Wiz Site News 3.x...

Web Wiz check_user.asp txtUserName Parameter SQL Injection

The remote host is running an ASP application from Web Wiz, such as Password Login, Journal, Polls, or Site News. The installed version of the Web Wiz application fails to validate user input to the 'txtUserName' parameter of the 'admin/checkuser.asp' script before using it in database queries. A...

Web Wiz Multiple Products check_user.asp txtUserName Parameter SQL Injection

Binary data 3339.prm...

CVE-2005-4606

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...

Web Wiz (Multiple Products) - SQL Injection

Web Wiz Multiple Products - SQL Injection source: https://www.securityfocus.com/bid/16085/info Multiple Products by Web Wiz are prone to an SQL injection vulnerability. Successful exploitation can allow an attacker to bypass authentication and gain unauthorized access to a site. Attacks may also...

Web Wiz (Multiple Products) - SQL Injection

source: https://www.securityfocus.com/bid/16085/info Multiple Products by Web Wiz are prone to an SQL injection vulnerability. Successful exploitation can allow an attacker to bypass authentication and gain unauthorized access to a site. Attacks may also result in disclosure or modification of...

Sendmail WIZ Command Enabled

The remote Sendmail service accepts the WIZ command. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail";...

WebWizXSS.txt

Bug : XSS in Web Wiz Forums cookie stealing Bug founded by : [email protected] Comment : I found this bug in +- 1 hour after some bitch asked me to help him, but he haven't do shit LOL Greets to : HaCkZaTaN, Johnnie Walker, Morinex, j0ker, Woopie, siLgi, bcuzZ. Big Fuck to : cobradrive, 0x1fe er...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum...

CVE-2005-2228

Web Wiz Forums 7.9 and 8.0 are affected by a vulnerability that allows remote attackers to view message titles of a hidden forum. The referenced CVE-2005-2228 entry notes network-based access with low attack complexity and no authentication, yielding partial confidentiality impact. No explicit ex...

CVE-2003-1176

postmessageform.asp in Web Wiz Forums 6.34 through 7.5, when quote mode is used, allows remote attackers to read or write to private forums by modifying the FID forum ID parameter...

CVE-2003-1176

Technical details about CVE-2003-1176 are not provided in the supplied connected documents. Public availability of affected versions, root cause, and fixes is not confirmed here. Monitor for updates.

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

Web Wiz Forums Registration Rules XSS Vulnerability

------------------------------------------------------ WEB WIZ FORUMS REGISTRATION RULES XSS VULNERABILITY ------------------------------------------------------ Online URL : http://ferruh.mavituna.com/article/?528 XSS / Cross Site Scripting attack allows an attacker to hijack other...

Web Wiz Forums 7.x - 'Registration_Rules.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10555/info A vulnerability exists in the Web Wiz Forums software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data passed to the 'registrationrules.asp'...

Web Wiz Forums 7.x - Registration_Rules.asp Cross-Site Scripting

Web Wiz Forums 7.x - RegistrationRules.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/10555/info A vulnerability exists in the Web Wiz Forums software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizi...