EUVD-2011-5037

Malware in sbrugna...

CVE-2011-5138

Cross-site scripting XSS vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a viewprofile action...

Sql injection

Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the 1 TopicID parameter to viewtopic.php, the 2 BoardID parameter to viewboard.php, or 3 CatID parameter to viewcat.php...

CVE-2011-5138

The CVE‑2011‑5138 entry describes a cross‑site scripting (XSS) vulnerability in tForum b0.915, specifically in member.php under the viewprofile action where the username parameter can inject arbitrary web script/HTML. Affected component: tForum (version b0.915); vulnerability type: XSS. Root caus...

tForum b0.915 Cross Site Scripting / SQL Injection

Exploit Title: tForum b0.915 Vulnerabilities Dork: intext:"powered by tForum b0.915" Author: snup Contact: [email protected] SQL Injection: DORK: inurl:"viewtopic.php?TopicID=" intext:"powered by tForum b0.915" inurl:"viewboard.php?BoardID=" intext:"powered by tForum b0.915"...

tForum b0.915 Vulnerabilities

Exploit for php platform in category web applications Exploit Title: tForum b0.915 Vulnerabilities Dork: intext:"powered by tForum b0.915" Author: snup Contact: email protected SQL Injection: DORK: inurl:"viewtopic.php?TopicID=" intext:"powered by tForum b0.915" inurl:"viewboard.php?BoardID="...