CVE-2026-28562

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::gettopics where the ORDER BY clause relies on ineffective escsql sanitization on unquoted identifiers. Attackers exploit the wpfob parameter with CASE WHEN payloads to perform blind boolean extraction of credentials...

EUVD-2006-0167

Malware in sbrugna...

EUVD-2006-0118

Malware in sbrugna...

foro-de-matematica.1118454.n5.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1182272 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Foro Domus 2.10 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16154/info Foro Domus is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

Foro Domus escribir.php email Parameter Cross-Site Scripting - Ver2 (CVE-2006-0110)

A cross-site scripting vulnerability has been reported in Foro Domus. Successful exploitation of this vulnerability would allow a remote attacker to inject arbitrary script into the affected system...

Foro Domus Menu.PHP远程文件包含漏洞

Foro Domus是一款基于PHP的WEB应用程序。 Foro Domus不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Menu.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Domus 2.10 目前没有解决方案提供,请关注以下链接： http://sourceforge.net/projects/domus/ C xoron Name: Foro Domus v2.10 Remote File Include Exploit Author: xoron Exploit code...

CVE-2007-0580

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

No description provided by source. C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0...

Foro Domus 2.10 (phpbb_root_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================= Foro Domus 2.10 phpbbrootpath Remote File Include Exploit ============================================================= C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File...

Foro Domus 2.10 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: Foro Domus v2.10 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=8920 xoron.biz Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0 $rfi = "menu.php?sesionidioma=";...

CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

Sql injection

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

CVE-2006-0159

CVE-2006-0159 is a SQL injection vulnerability in Foro Domus 2.10, specifically in escribir.php via the email parameter. According to the connected NVD entry, remote attackers can execute arbitrary SQL commands (AV:N/AC:L/Au:N/C:P/I:P/A:P). The affected component is Foro Domus 2.10, escribi r.php...

CVE-2006-0159

SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...

Cross site scripting

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2006-0110

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2006-0110

Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...