vbzoom 1.x - 'forum.php?MainID' SQL Injection

--/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHH HH HH HH HH HHH HHHHH HH H...

EsForum 3.0 (forum.php idsalon) Remote SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: EsForum 3.0 Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html Contact: ilker Kandemir...

Sql injection

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 dzial parameter to a katalog.php, or the 2 t parameter to b forum.php or c forum/viewtopic.php, different vectors than CVE-2006-4536...

EsForum 3.0 (forum.php idsalon) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== EsForum 3.0 forum.php idsalon Remote SQL Injection Vulnerability ==================================================================...

CVE-2007-2299: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 dzial parameter to a katalog.php, or the 2 t parameter to b forum.php or c forum/viewtopic.php, different vectors than CVE-2006-4536...

EsForum 3.0 - forum.php?idsalon SQL Injection

EsForum 3.0 - forum.php?idsalon SQL Injection ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: EsForum 3.0 Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html Contact: ilker...

EsForum 3.0 - 'forum.php?idsalon' SQL Injection

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: EsForum 3.0 Script Download: http://www.editeurscripts.com/scripts/dl-esforum-3.html Contact: ilker Kandemir info: / MEFISTO Begins. /...

CVE-2007-2259

SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter...

EsForum Forum.PHP SQL注入漏洞

EsForum是一款基于PHP的WEB应用程序。 EsForum不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Forum.PHP'脚本对用户提交的'idsalon'参数缺少过滤，提交恶意SQL命令作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 EsForum 3.0 目前没有解决方案提供： http://www.editeurscripts.com/scripts/dl-esforum-3.html...

CVE-2007-2259: Undefined Security Weakness

SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via the idsalon parameter...

phpBB Minerva Mod <= 2.0.21 build 238a SQL Injection Vulnerability

No description provided by source. ======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz +...

CVE-2007-1555: Undefined Security Weakness

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2006-7128: Undefined Security Weakness

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in forum.php in Open Tibia Server CMS OTSCMS 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter...

CVE-2007-0846

Cross-site scripting XSS vulnerability in forum.php in Open Tibia Server CMS OTSCMS 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter...

CVE-2007-0846: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.php in Open Tibia Server CMS OTSCMS 2.1.5 and earlier allows remote attackers to inject arbitrary HTML or web script via the name parameter...

Design/Logic Flaw

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0597

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

CVE-2007-0597: Undefined Security Weakness

Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, which reveals the path in an error message...

JAF CMS Forum.PHP远程文件包含漏洞

Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...