PT-2018-13540

Name of the Vulnerable Software and Affected Versions e107 version 2.1.8 Description The issue allows SQL injection via the old ip parameter in the e107 admin/banlist.php file. Recommendations For version 2.1.8, avoid using the old ip parameter in the affected API endpoint until the issue is...

Phorum 5.2 admin/banlist.php curr Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...