Sql injection

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to 1 login.asp and 2 main.asp...

CVE-2006-2541

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to 1 login.asp and 2 main.asp...

CVE-2006-2541

CVE-2006-2541 describes an SQL injection vulnerability in Zixforum 1.12, specifically in settings.asp. The vulnerability allows an attacker to craft the layid parameter to (1) login.asp and (2) main.asp to execute arbitrary SQL commands on the backend database. This is a remote code execution ris...

CVE-2005-4334

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the HID parameter to 1 zixforum/forum.asp, as used in 2 Headforums.asp and 3 Subject.asp...

CVE-2005-4334

CVE-2005-4334 affects ZixForum 1.12, where an SQL injection flaw exists in the H_ID parameter used by zixforum/forum.asp and its references (Headforums.asp, Subject.asp). Exploitation would allow remote attackers to inject SQL commands. The available documents identify the vulnerable component (f...

CVE-2005-4334

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the HID parameter to 1 zixforum/forum.asp, as used in 2 Headforums.asp and 3 Subject.asp...

ZixForum 1.12 - 'forum.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16406/info ZixForum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...

ZixForum 1.12 - forum.asp Multiple SQL Injections

ZixForum 1.12 - forum.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/16406/info ZixForum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

ZixForum ZixForum.mdb DIrect Request Database Disclosure

The remote server is running ZixForum, a set of ASP scripts for a web-based forum. This program uses a database named 'ZixForum.mdb' that can be downloaded by any client. This database contains discussions, account information, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...