10 matches found
EUVD-2006-0118
Malware in sbrugna...
Remote file inclusion
PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...
CVE-2007-0580
CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...
CVE-2006-0159
SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...
Sql injection
SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...
CVE-2006-0159
SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained...
CVE-2006-0159
CVE-2006-0159 is a SQL injection vulnerability in Foro Domus 2.10, specifically in escribir.php via the email parameter. According to the connected NVD entry, remote attackers can execute arbitrary SQL commands (AV:N/AC:L/Au:N/C:P/I:P/A:P). The affected component is Foro Domus 2.10, escribi r.php...
Cross site scripting
Cross-site scripting XSS vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter...
CVE-2006-0110
CVE-2006-0110 describes a Cross-site scripting (XSS) vulnerability in the Foro Domus 2.10 component escribir.php, exploitable via the email parameter to inject arbitrary web script. The connected documents confirm the affected application and vulnerable parameter, but do not provide explicit reme...