EUVD-2006-1400

Malware in sbrugna...

[SA19439] Cholod Mysql based message board Script Insertion and SQL Injection

TITLE: Cholod Mysql based message board Script Insertion and SQL Injection SECUNIA ADVISORY ID: SA19439 VERIFY ADVISORY: http://secunia.com/advisories/19439/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Cholod Mysql based message...

CVE-2006-1395

The CVE-2006-1395 entry concerns a SQL injection vulnerability in mb.cgi of the Cholod MySQL Based Message Board. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action (possibly via the username parameter), with CVSS considerations ind...

CVE-2006-1395: Undefined Security Weakness

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-1396: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...