CVE-2016-6195: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016...

CVE-2010-0678

The vulnerability CVE-2010-0678 affects Katalog Stron Hurricane 1.3.5 (and possibly earlier) via a PHP remote file inclusion in includes/moderation.php when register_globals is enabled. An attacker can supply a URL in the includes_directory parameter to execute arbitrary PHP code on the server. T...

CVE-2010-0678: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includesdirectory parameter...