CVE-2005-3816

Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter or 2 thread parameter in thread mode...

CVE-2005-3816

CVE-2005-3816 describes multiple SQL injection vulnerabilities in freeForum 1.1 and earlier, exploitable via the cat or thread parameters in thread mode, allowing remote execution of arbitrary SQL commands. Affected product: freeForum (forum.php). Root cause: insufficient input handling leading t...

CVE-2005-3815

CVE-2005-3815 affects Orca Forum 4.3b and earlier, where a SQL injection flaw in forum.php (msg parameter) allows remote attackers to execute arbitrary SQL commands. The vulnerability is confirmed in multiple sources (NVD/CVE records). The available documents do not specify a remediation or patch...

CVE-2005-3815: Undefined Security Weakness

SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQL commands via the msg parameter...

CVE-2005-3816: Undefined Security Weakness

Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter or 2 thread parameter in thread mode...

freeForum 1.x "cat" "thread" SQL inj.

freeForum 1.x "cat" "thread" SQL inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html Vendor:http://soft.zoneo.net/freeForum/ affected version: 1.1 and prior Vuln. description: Input passed to the "cat" and...

CVE-2005-3686

CVE-2005-3686 describes an SQL injection vulnerability in the Unclassified NewsBoard (UNB) product. The issue resides in the search.inc.php component and is exploitable via the forum.php path using the (1) DateFrom or (2) DateUntil parameters. The root cause is improper handling of user-supplied ...

CVE-2005-3686: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.inc.php in Unclassified NewsBoard before 1.5.3 Patch 4 allows remote attackers to execute arbitrary SQL commands via the 1 DateFrom or 2 DateUntil parameter to forum.php...

CVE-2005-3584

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

CVE-2005-3585

The connected OpenVAS entries confirm a concrete SQL injection in PhpWebThings 1.4.x through forum.php (parameter: forum). Exploitation could allow remote attackers to view usernames/password hashes and potentially gain administrative access; root cause is improper input sanitization in the forum...

CVE-2005-3585: Undefined Security Weakness

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

CVE-2005-3584: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

phpWebThings144.txt

Vulnerable: phpWebThings 1.4.4 http://phpwebthings.org The bug reside in : forum.php Exploit : http://xxx.com/forum.php?forum=XSS http://xxx.com/forum.php?forum=SQL Example : XSS http://xxx.com/forum.php?forum='alertdocument.cookie SQL For Passowrd http://xxx.com/forum.php?forum=-1 union select...

PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser...

CVE-2005-3394

Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 channel parameter in the topics module and 2 topic parameter in the posting module...

CVE-2005-3394

/* CVE-2005-3394 */ Summary: Multiple SQL injection vulnerabilities affect the oaboard forum 1.0 in the file/forum logic (forum.php). The two vulnerable parameters are the (1) channel parameter in the topics module and (2) the topic parameter in the posting module. What is affected: oaboard forum...

CVE-2005-3394: Undefined Security Weakness

Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 channel parameter in the topics module and 2 topic parameter in the posting module...

OaBoard 1.0 - forum.php Multiple SQL Injections

OaBoard 1.0 - forum.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15245/info OaBoard is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation...

OaBoard 1.0 - 'forum.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15245/info OaBoard is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application,...

CVE-2005-2430

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 forumid or 2 groupid parameter to forum.php, 3 projecttaskid parameter to task.php, 4 id parameter to detail.php, 5 the text field on the search page, 6 groupid...