Simple Free PHP Forum Script <= SQL Injection Vulnerability

No description provided by source. Exploit Title: Simple Free PHP Forum Script = 1 SQL Injection Vulnerability Date: 2011-10-19 Author: Skraps, Jackie Craig Sparksjackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://www.phpforumscript.com/?pageid=11 Versio...

ASP Forum Script messages.asp message_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Ramui Forum Script - query Cross-Site Scripting

Ramui Forum Script - query Cross-Site Scripting source: https://www.securityfocus.com/bid/53411/info Ramui Forum Script is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Ramui Forum Script Cross Site Scripting

Exploit Title; Ramui Forum Script Cross Site Scripting Vulnerability pixlie.php Date ; 7/5/12 Author ; 3spi0n Script Vendor or Software Link ; www.ramui.com - www.hotscripts.com/listing/ramui-forum-script/ Category ; Webapps Type ; Cross Site Scripting XSS Tested on ; Ubuntu / Win7 / Backtrack...

Ramui Forum Script - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53411/info Ramui Forum Script is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Simple Free PHP Forum Script - SQL Injection

Simple Free PHP Forum Script - SQL Injection Exploit Title: Simple Free PHP Forum Script 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1 wget "http://127.0.0.1/forum/index.php?show=cat&id=1' AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1" --------------...

Simple Free PHP Forum Script - SQL Injection

Exploit Title: Simple Free PHP Forum Script 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1 wget "http://127.0.0.1/forum/index.php?show=cat&id=1' AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1" -------------- Vurnerable Code -------------- Line 150 of...

Simple Free PHP Forum Script <= SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Simple Free PHP Forum Script 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1 wget "http://127.0.0.1/forum/index.php?show=cat&id=1' AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0 AND id='1"...

NinkoBB 1.3RC5 Stored Cross Site Scripting

Exploit Title: NinkoBB 1.3RC5 stored XSS in Topic Subject field Date: 26-1-2011 Author: Saif El-Sherei Software Link: http://ninkobb.com/wiki/releases Version: NinkoBB 1.3RC5 Tested on: Firefox 3.0.15, , IE 8 Vendor Notified: 26-1-2011, awaiting vendor response. Google Dork: "Powered By...

Interactive Forum Script Remote File Inclusion

Tilte: Orca - Interactive Forum Script Remote File Inclusion Vulnerability. Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Orca Interactive Forum Script. Site Software ..........:...

Forum Script Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Forum script Persistent XSS Vulnerability + Software : Forum script + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz, Sheiry,...

Sql injection

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

CVE-2008-6890

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

CVE-2008-6891

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

CVE-2008-6890

CVE-2008-6890 describes an SQL injection vulnerability in the ASP Forum Script’s messages.asp, exploitable via the message_id parameter. The affected component is the ASP Forum Script’s messaging functionality; the root cause is improper handling of user-supplied input in message_id, enabling an ...

CVE-2008-6890

SQL injection vulnerability in messages.asp in ASP Forum Script allows remote attackers to execute arbitrary SQL commands via the messageid parameter...

CVE-2008-6891

CVE-2008-6891 concerns multiple XSS flaws in ASP Forum Script. The affected component is the ASP Forum Script web application, with the vulnerabilities exploitable via user-supplied input: (1) the forum_id parameter to new_message.asp and to messages.asp, and (2) the query string to default.asp. ...

CVE-2008-6891

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

CVE-2008-6891: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...