EUVD-2020-12976

Malware in sbrugna...

Sql injection

SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php...

CVE-2020-20189

CVE-2020-20189 is a SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. The affected component is NewPK 1.1 and the root cause is improper input handling in the title field, enabling SQL statements to be executed against the database. CVSS scores on the entry ar...

DeluxeBB 1.0 newpost.php fid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a...

CVE-2011-3838

Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to fp.php, 2 epage parameter to newpage.php, 3 epost parameter to newpost.php, and 4 username parameter to login.php in admin/; or the 5 username parameter to...

Sql injection

SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread...

PT-2006-5351 · Deluxebb +1 · Deluxebb +1

Name of the Vulnerable Software and Affected Versions: DeluxeBB versions 1.06 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php, specifically when run...

CVE-2006-4079

Cross-site scripting XSS vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter aka the topic title field...

DeluxeBB 1.0 - newpost.php SQL Injection

DeluxeBB 1.0 - newpost.php SQL Injection source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result i...

DeluxeBB 1.0 - 'newpost.php' SQL Injection

source: https://www.securityfocus.com/bid/14851/info DeluxeBB is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before being sent to SQL queries. Successful exploitation could result in a compromise of the application,...