CVE-2018-16389

e107admin/banlist.php in e107 2.1.8 allows SQL injection via the oldip parameter...

CVE-2018-16389

e107admin/banlist.php in e107 2.1.8 allows SQL injection via the oldip parameter...

PT-2018-13540

Name of the Vulnerable Software and Affected Versions e107 version 2.1.8 Description The issue allows SQL injection via the old ip parameter in the e107 admin/banlist.php file. Recommendations For version 2.1.8, avoid using the old ip parameter in the affected API endpoint until the issue is...

CVE-2018-16389: Improper Neutralization of Special Elements used in an SQL Command

e107admin/banlist.php in e107 2.1.8 allows SQL injection via the oldip parameter...

Phorum 5.2 admin/banlist.php curr Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...

Phorum Cross Site Scripting / Request Forgery

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...

CVE-2007-2338

Phorum prior to 5.1.22 is affected by a CSRF vulnerability in include/admin/banlist.php that allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter. The issue is a CSRF, enabling privilege escalation of admin actions without exploiting authe...

CVE-2007-2338: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote attackers to perform unauthorized banlist deletions as an administrator via the delete parameter...