17 matches found
Koobi Pro 5.6 showtopic Module toid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an...
Koobi Pro 5.6 showtopic Module toid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/18970/info Koobi Pro prone to a cross-site scripting issue and an SQL-injection issue because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities could allow an...
Invision Power Board 1.x Index.php Showtopic Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8575/info Invision Power Board is prone to a cross-site scripting vulnerability. It has been reported that a remote attacker may construct a malicious link to the index.php script and supply arbitrary HTML code as a value...
CVE-2008-4736
SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the showtopic parameter...
Sql injection
SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the showtopic parameter...
CVE-2008-4736
SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the showtopic parameter...
Sql injection
SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...
CVE-2008-0695
SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...
CVE-2008-0695
SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...
BookmarkX script 2007 (topicid) Remote SQL Injection Vulnerability
No description provided by source. BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...
BookmarkX script 2007 - topicid SQL Injection
BookmarkX script 2007 - topicid SQL Injection BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...
BookmarkX script 2007 - 'topicid' SQL Injection
BookmarkX scriptPowered by GengoliaWebStudioSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "2007 BookmarkX script" DORKS 2 : Powered by GengoliaWebStudio DORK 3 : allinurl :"index.php?menu=showtopic" EXPLOIT :...
CVE-2006-3621
CVE-2006-3621 concerns Koobi Pro CMS 5.6, specifically the showtopic module. The vulnerability is a SQL injection flaw in the toid parameter that enables remote attackers to execute arbitrary SQL commands. The associated CVSSv2 metrics indicate a base score of 7.5 (HIGH) with network access and l...
CVE-2006-3622
The CVE-2006-3622 issue affects Koobi Pro CMS 5.6 (showtopic module). A remote attacker could disclose information by abusing the p parameter containing a single quote, which leads to an error message that reveals the path. The underlying root cause is not clearly determined in the provided docum...
CVE-2006-3622
The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' single quote in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error...
CVE-2006-3621
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter...
CVE-2006-1076
CVE-2006-1076 affects Invision Power Board (IPB) 2.1.5. The vulnerability is a SQL injection in index.php during a showtopic-like operation, exploitable via the st parameter , allowing remote attackers to execute arbitrary SQL commands. The connected documents do not provide a patch or specific r...