Sql injection

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-6029

SQL injection vulnerability in search.php in BuzzyWall 1.3.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2008-4759

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...

Directory traversal

Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local files via a .. dot dot in the id parameter...