CVE-2006-2050

SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...

CVE-2006-2049

Cross-site scripting XSS vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter...

CVE-2006-2050

SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter...

CVE-2006-2050

CVE-2006-2050 affects DCScripts DCForumLite 3.0 via SQL injection in dcboard.cgi (parameter az). Root cause: improper input handling allowing arbitrary SQL execution by remote attackers. Impact: potential data exposure or modification as described in the original vulnerability note. Connected rec...

CVE-2006-2049

CVE-2006-2049 is a cross-site scripting (XSS) vulnerability in DCScripts DCForumLite 3.0, specifically in the dcboard.cgi handler where the az parameter can be crafted to inject arbitrary web script or HTML. The vulnerability enables remote attackers to inject scripts in victims’ browsers, with t...

CVE-2001-0436

The vulnerability CVE-2001-0436 affects DCForum 2000, specifically the dcboard.cgi CGI: remote attackers can execute arbitrary commands by uploading a Perl program to the server and referencing it via a .. in the AZ parameter. This is documented in the NVD entry for DCForum 2000 1.0 with a base s...