PT-2013-1984

Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10 Description The issue concerns SQL injection vulnerabilities in the advanced search functionality. Remote attackers can execute arbitrary SQL commands by manipulating the select sort or opt search select parameters...

PT-2013-1542

Name of the Vulnerable Software and Affected Versions Wikidforum version 2.10 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including the search field,...