husrevforum 1.0.1/2.0.1 Philboard_forum.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24928/info The 'husrevforum' program is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

CVE-2008-0750

The CVE-2008-0750 entry affects Husrev BlackBoard 2.0.2, specifically the philboard_forum.asp component. The vulnerability is a SQL injection exploitable via the forumid parameter, allowing remote attackers to execute arbitrary SQL commands. This information is supported by linked records (e.g., ...

CVE-2008-0750: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in philboardforum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2007-4116: Undefined Security Weakness

SQL injection vulnerability in philboardforum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884...

Metyus Forum Portal v1.0

Bug Names : Metyus Forum Portal v1.0 philboardforum.asp id Sql njection script name : Metyus Forum Portal For Example Page : http://users1.nofeehost.com/canavartepe/forum/philboard.asp Version : 1.0 Risk : High Download : http://aspindir.com/indir.asp?id=3889 Found By : Cr@zyKing Thanks : Eno7 |...

Sql injection

SQL injection vulnerability in philboardforum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected...

CVE-2007-3884: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in philboardforum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: it was later reported that 2.0.1 is also affected...

CVE-2007-0920: Undefined Security Weakness

SQL injection vulnerability in philboardforum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

philboard-sql.txt

---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp" ----------------------------------------------------...