Arab Portal 2.x - (forum.php qc) Remote SQL Injection Exploit

No description provided by source. ? / Arab Portal v2.x forum.php qc SQL Injection Exploit - Author : rEcruit - Mail : [email protected] - Download : http://arab-portal.net/download.php - Vuln in ./forum.php Line: 1503 code ifisset$apt-getqc &&!isset$apt-getqp $qc = $apt-getqc; $result =...

Orca Forum 4.3 Forum.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15565/info Orca Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

FLIP 0.9 .0.1029 forum.php frame Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

simple forum 3.2 (fd/xss) Multiple Vulnerabilities

No description provided by source. SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] software : SIMPLE FORUM v3.2 download : http://www.gerd-tentler.de/tools/forum/ 1.XSS vulnerable code on forum.php ? ..... ifisset$REQUEST'dateshow' $dateshow =...

FreeForum <= 0.9.7 (forum.php) Remote File Include Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FreeForum 0.9.7 fpath Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturki...

WordPress WP Forum Server Plugin <= 1.7.4 - XSS

Because of this vulnerability in fs-admin/wpf-add-forum.php, the attackers can inject arbitrary web script or HTML via the "groupid" parameter. Solution Update the plugin...

CVE-2010-2463

CVE-2010-2463 affects Jamroom before 4.1.9. The XSS vulnerability occurs in forum.php’s modify action via the post_id parameter due to input sanitization flaws, allowing remote attackers to inject arbitrary HTML/JavaScript into users’ browsers. An exploit example is provided by HTBridge (and rela...

Big Forum - forum.php?id SQL Injection

Big Forum - forum.php?id SQL Injection ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============ EXPL0!T http://server/path/forum.php?id=3SQL =========================================================== Greetz to : Alnjm33-virus-pal -g3n1ux - Predator-Ahmadso ...

Big Forum (forum.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Big Forum forum.php SQL Injection Vulnerability ================================================= EXPL0!T http://server/path/forum.php?id=3SQL...

Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting

Jamroom 4.0.24.1.x - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41071/info Jamroom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2009-4783

The CVE-2009-4783 item concerns multiple SQL injection vulnerabilities in Theeta CMS (version unclear). The affected entry points are the start parameter in three PHP scripts: community/forum.php, community/thread.php, and blog/index.php, where user-supplied input may be concatenated into SQL que...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

CVE-2009-4649

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

CVE-2009-4649

GeccBBlite 0.1 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via the postatoda parameter to rispondi.php and scrivi.php, with improper handling in forum.php. The NVD/NVD-derived entry lists a CVSS v2 ba...

CVE-2009-4649

Multiple cross-site scripting XSS vulnerabilities in geccBBlite 0.1 allow remote attackers to inject arbitrary web script or HTML via the postatoda parameter to 1 rispondi.php and 2 scrivi.php, which is not properly handled in forum.php...

Triburom - forum.php Cross-Site Scripting

Triburom - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40316/info Triburom is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

CVE-2009-4547

Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Stiva Forum 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 demo.php and 2 forum.php, and the PATHINFO to 3 includeforum.php...

VideoGirls BiZ Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || VideoGirls BiZ Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.videogirls.biz/ Greetings : Mizoz, Zuka,...

Stiva Forum 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Stiva FORUM 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.stivaforum.com/ Greetings : Mizoz, Zuka,...