CVE-2010-0938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2006-0517: Undefined Security Weakness

Multiple SQL injection vulnerabilities in formulaires/inc-formulaireforum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 idforum, 2 idarticle, or 3 idbreve parameters to forum.php3; 4 unspecified vectors related...