CVE-2007-4719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3169

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...

CVE-2006-3169

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...

CVE-2006-3169: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 msgresult and 2 reptitre parameters in a read.php; and the 3 id and 4 parent parameters and 5 CSForumnom, 6 CSForummail, and 7 CSForumurl cookie...

CVE-2006-3168: Undefined Security Weakness

SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 debut parameters in a read.php, and the 3 search and 4 debut parameters in b index.php...

CVE-2006-2088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2006-1131

Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...

CVE-2006-1131: Undefined Security Weakness

Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...

CVE-2005-4596: Undefined Security Weakness

Cross-site scripting XSS vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the totalRowsrsRead parameter...

SQL IN Open Bulletin Board

Class: Input Validation Error Remote: Yes Local: Yes Credit: ABDUCTER ---- [email protected] OR [email protected] Vulnerable: Powered by Open Bulletin Board ALL VERSION info :- openbb is APOPULAR FORUM HAVE MANY VERSION U CAN FIND SOURCE OF FORUM IN http://www.openbb.com/ discussi...

CVE-2004-2240

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via 1 the query string in read.php or 2 unknown vectors in file.php...

CVE-2004-2241

Phorum 5.0.11 and earlier is affected by a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML or web script via search.php. The note indicates some sources claim the vulnerable file is read.php, but this conflicts with the vendor’s patch. The NVD entry,...

CVE-2004-2240: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via 1 the query string in read.php or 2 unknown vectors in file.php...

CVE-2005-1612: Undefined Security Weakness

SQL injection vulnerability in read.php in Open Bulletin Board OpenBB 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter...