EUVD-2002-1859

Malware in sbrugna...

EUVD-2002-1858

Malware in sbrugna...

CVE-2002-1879

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the 1 member parameter to member.php or 2 loser parameter to misc.php...

CVE-2002-1880

LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...

CVE-2002-1880

LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...

CVE-2002-1879

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the 1 member parameter to member.php or 2 loser parameter to misc.php...

CVE-2002-1880

LokwaBB 1.2.2 contains a vulnerability where remote attackers can read arbitrary messages by modifying the pmid parameter in pm.php. The affected component is the web application logic handling pmid values; concrete root cause is improper handling/validation of the pmid input that leads to unauth...

CVE-2002-1879

CVE-2002-1879 describes an SQL injection in LokwaBB 1.2.2 that lets remote attackers execute arbitrary SQL via the (1) member parameter to member.php or (2) loser parameter to misc.php. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and partial impacts on confidentialit...

CVE-2002-1880

LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php...

CVE-2002-1879

SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the 1 member parameter to member.php or 2 loser parameter to misc.php...

Security holes in LokwaBB and W-Agora

Somebody advised me to post also on bugtraq not only on vuln-dev, I thus do it : I just hope that doesn't give more work to the webmasters. Product 1 : W-Agora 4.1.3 http://www.w-agora.net Problem : - Including file Exploits : - With a file http://www.attacker.com/dbaccess.txt :...