CVE-2006-3078

CVE-2006-3078 describes multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier . Attackers can remotely execute arbitrary SQL commands via the PHPSESSID parameter in board.php and the viewcatmod parameter in main.php . The connected documents confirm these vectors and the affected s...

CVE-2006-3078

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID parameter in board.php and 2 viewcatmod parameter in main.php...

APBoard 2.2-r3 <= SQL Injections

APBoard 2.2-r3 = SQL Injections - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Discovered by: 666 SR-Crew Homepage: www.SR-Crew.de.tt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Vendor: APBoard from APP Homepage: www.php-programs.de - - - - - - - - - - - - - - - - - -...

apboardSQL.txt

hi APBoard v|all|-- SQL injection site: http://www.php-zentrale.de MySQL-Error:You have an error in your SQL syntax near '',40' at line 1 1064 exploet: http://site.com/apboard/thread.php?id=210&start=SQL www.s4a.cc abdulmageed...

CVE-2005-3746

SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2005-3746

APBoard is affected by CVE-2005-3746 due to an SQL injection in thread.php via the start parameter. The vulnerability lets remote attackers execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability on affected data. The connected sources do not ...

CVE-2005-3746

SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter...

APBoard v [all] ---> [SQL injection]

hi APBoard v|all|-- SQL injection site: http://www.php-zentrale.de MySQL-Error:You have an error in your SQL syntax near '',40' at line 1 1064 exploet: http://site.com/apboard/thread.php?id=210&start=SQL www.s4a.cc abdulmageed...

APBoard - thread.php SQL Injection

APBoard - thread.php SQL Injection source: https://www.securityfocus.com/bid/15513/info APBoard is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of...

APBoard - 'thread.php' SQL Injection

source: https://www.securityfocus.com/bid/15513/info APBoard is prone to an SQL injection vulnerability. This is due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application, disclosure or...

APBoard 2.02 未授权内部论坛信息可读漏洞

BUGTRAQ: 6330 由于'useraction.php'脚本不正确检查用户权限信息，远程攻击者可以利用这个漏洞未授权读取内部论坛的帖子。 利用'useraction.php'脚本对用户权限检查不正确，远程攻击者可以使脚本把内部论坛的帖子直接发到攻击者注册的信箱，造成未授权访问内部信息。 APBoard 2.02 厂商补丁： APP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php-programming.info/...

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...

APBoard-Bug

Product: APBoard-Bug Versions: tested on 2.02 Vulnerability: users can subscribe a thread in the internal forum Date: Dezember 5, 2002 Discovered by: DNA [email protected] Introduction: Normal Users can read new answers to a thread in the internal forum I have already informed APP about this...

APBoard 2.0 2 - Unauthorized Thread Reading

APBoard 2.0 2 - Unauthorized Thread Reading source: https://www.securityfocus.com/bid/6330/info A vulnerability has been reported for APBoard that may allow unauthorized users to read postings in internal forums. The vulnerability is a result of the 'useraction.php' script failing to properly che...

APBoard 2.0 2 - Unauthorized Thread Reading

source: https://www.securityfocus.com/bid/6330/info A vulnerability has been reported for APBoard that may allow unauthorized users to read postings in internal forums. The vulnerability is a result of the 'useraction.php' script failing to properly check user credentials...

APBoard - post threads to protected forums and possibility to hijack forum-password

Product: Another PHP Program - APBoard Versions: tested on 2.02, 2.03 Vulnerability: post threads to protected forums and possibility to hijack forum-password Date: November 12, 2002 Discovered by: ProXy [email protected] Introduction: Normal Users can submit threads to password protected forums a...