472 matches found
Phorum 5.1.20 - 'admin.php' Groups Module Edit/Add Group Field SQL Injection
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
Phorum 5.1.20 - 'admin.php' badwords/banlist Module SQL Injection
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
Phorum 5.1.20 - admin.php?module[] Full Path Disclosure
Phorum 5.1.20 - admin.php?module Full Path Disclosure source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting...
Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection
Phorum 5.1.20 - admin.php badwordsbanlist Module SQL Injection source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site...
Phorum 5.1.20 - includecontrolcenterusers.php Multiple Method Privilege Escalations
Phorum 5.1.20 - includecontrolcenterusers.php Multiple Method Privilege Escalations source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues,...
Phorum 5.1.20 - admin.php?modsettings Module smiley_id Cross-Site Scripting
Phorum 5.1.20 - admin.php?modsettings Module smileyid Cross-Site Scripting source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and...
Phorum 5.1.20 - 'admin.php?Groups Module group_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
Phorum 5.1.20 - 'pm.php' Recipient Name SQL Injection
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
waraxe-2007-SA-049.txt
waraxe-2007-SA049 - Multiple vulnerabilities in Phorum 5.1.20 ==================================================================== Author: Janek Vind "waraxe" Date: 19. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-49.html Target software description: Phorum 5.1.20...
[waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20
waraxe-2007-SA049 - Multiple vulnerabilities in Phorum 5.1.20 ==================================================================== Author: Janek Vind "waraxe" Date: 19. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-49.html Target software description: Phorum 5.1.20...
XXS in script Phorum
======================================================================= Script : Script Phorum Found By : Hasadya Raed Contact : [email protected] ================================================= exemple: http://www.site.com/path/admin.php?upgradefile="alert.;/script ====================== Greetz...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2007-1219
Admin Phorum 3.3.1a is affected by CVE-2007-1219: a PHP remote file inclusion in actions/del.php that lets an attacker supply a URL via include_path to execute arbitrary PHP code. Impact is remote code execution with partial confidentiality/integrity/availability compromises as per CVSS 2.0 metri...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability
No description provided by source. br / br / Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability br / br /...
Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability
Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...