CVE-2008-2816

CVE-2008-2816 affects Oxygen (O2PHP Bulletin Board) 2.0. The vulnerability is in post.php, exploitable via the repquote parameter in a reply action, allowing remote SQL injection. This is a different vector than CVE-2006-1572. According to the NVD record, the base metrics indicate a HIGH severity...

CVE-2006-6280: Undefined Security Weakness

SQL injection vulnerability in viewthread.php in Oxygen O2PHP Bulletin Board 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572...

Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection

!/usr/bin/php -------------------------------------------------------\n"; exit1; print "\n Please be patient max=736 hits...\n MD5: "; $host = !pregmatch"/^http://\S/",$argv1,$hwttp ? $argv1 : $hwttp1; $path = $argv2; $usid = intval$argv3; $tabl = "o2members"; for$x=1; $x mi...

O2PHP Oxygen 1.01.1 - post.php SQL Injection

O2PHP Oxygen 1.01.1 - post.php SQL Injection source: https://www.securityfocus.com/bid/17324/info Oxygen is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...