123 matches found
CVE-2006-1766: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 getlang and 2 reporeid parameter in a index.php, 3 menuid parameter in b plugin.php and c forumthread.php, and 4 msgid parameter in forumthread.php...
Papoo Multiple SQL vuln.
Papoo Multiple SQL vuln. Vuln. discovered by : r0t Date: 10 april 2006 vendor:http://www.papoo.de/ affected versions: 2.1.5 & 3 beta1 and previous Vuln. description: Papoo contains a flaw that allows a remote sql injection attacks.Inputpassed to the "getlang","reporeid" parameters in " index.php"...
CVE-2002-0764: Undefined Security Weakness
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to 1 plugin.php, 2 admin.php, or 3 del.php that modifies the PHORUMsettingsdir variable to point to a directory that contains a PHP file with the commands...