9 matches found
CVE-2007-6727
The CVE-2007-6727 entry describes a SQL injection in KerviNet Forum 1.1, specifically topic.php, where the parameter forum can be exploited to execute arbitrary SQL commands remotely. This is the underlying vulnerability: improper sanitization/parameter handling in the forum parameter leading to ...
KerviNet Forum 1.1 SQL Injection / XSS
dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...
kervinet forum 1.1 - Multiple Vulnerabilities
dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...
Sql injection
Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...
CVE-2008-2448
Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...
CVE-2008-2448
CVE-2008-2448 relates to multiple SQL injection vulnerabilities in Meto Forum 1.1 . The flaws allow remote attackers to execute arbitrary SQL commands via specific parameters: (1) id to (a) admin/duzenle.asp and (b) admin_oku.asp; (2) kid to (c) kategori.asp and (d) admin_kategori.asp; and unspec...
Directory traversal
Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the chemin parameter...
CVE-2007-4457
CVE-2007-4457 describes a directory traversal vulnerability in Dalai Forum 1.1, specifically in forumreply.php, where an attacker can manipulate the chemin parameter using .. to include and execute arbitrary local files. The affected component is the forumreply.php script in Dalai Forum 1.1; the ...