EUVD-2004-2204

Malware in sbrugna...

EUVD-2005-4160

Malware in sbrugna...

EUVD-2005-3737

Malware in sbrugna...

EUVD-2009-3418

Malware in sbrugna...

EUVD-2021-11957

Malware in sbrugna...

EUVD-2006-2976

Malware in sbrugna...

EUVD-2005-3304

Malware in sbrugna...

CVE-2021-25045

The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue...

CVE-2021-25045 Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id

The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue...

CVE-2021-25045: Improper Neutralization of Special Elements used in an SQL Command

The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue...

Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id

The plugin does not validate or escape the forumid parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue PoC POST /wp-admin/admin.php?page=asgarosforum-structure HTTP/1.1 Accept:...

WS-2013-0243

In Tuleap, versions 4.0.9 through 6.0 are vulnerable to Cross-Site Scripting XSS in the tabbed layout class page, due to the parameter “forumid” is not escaped after user input...

WS-2013-0244

In Tuleap, versions 4.0.9 through 6.0 are vulnerable to Cross-Site Scripting XSS in DivBased tabbed layout class page, due to the parameter “forumid” not escaped after user input...

CVE-2009-4884: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpCommunity 2 2.1.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter in a forum action to index.php, 2 the topicid parameter in a forum action to index.php, 3 the wert parameter in an ...

CVE-2009-4547: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ViArt CMS 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid parameter to forums.php, or the forumid parameter to 2 forum.php or 3 forumtopicnew.php...

CVE-2009-4548: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

Sql injection

Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the 1 forum parameter to modules/forum/post.php and possibly 2 forumid variable to modules/forum/class/class.permissions.php...

CVE-2009-3436: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...

CVE-2008-6891: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ASP Forum Script allow remote attackers to inject arbitrary web script or HTML via the 1 forumid parameter to a newmessage.asp and b messages.asp, and the 2 query string to default.asp...

MyBulletinBoard (MyBB) &lt;= 1.2.10 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc5 print "-------------------------------------------------------------------------\r\n"; print " MyBB ...