EUVD-2006-0143

Malware in sbrugna...

EUVD-2006-0142

Malware in sbrugna...

TheWebForum register.php www Parameter XSS - Ver2 (CVE-2006-0134)

A cross-site scripting vulnerability has been reported in TheWebForum. The vulnerability is due to the application not validating the 'www' variable upon submission to the 'register.php' script. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web...

TheWebForum 1.2.1 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16161/info TheWebForum is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)

An SQL injection vulnerability has been reported in TheWebForum twf. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

TheWebForum login.php username Parameter SQL Injection - Ver2 (CVE-2006-0135)

An SQL injection vulnerability has been reported in TheWebForum twf. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

[SA18392] TheWebForum Script Insertion and SQL Injection Vulnerabilities

TITLE: TheWebForum Script Insertion and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18392 VERIFY ADVISORY: http://secunia.com/advisories/18392/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: TheWebForum 1.x...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in TheWebForum twf 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter...

Sql injection

SQL injection vulnerability in login.php in TheWebForum twf 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter aka the u variable...

CVE-2006-0135

The CVE-2006-0135 entry concerns a SQL injection in TheWebForum (twf) 1.2.1, specifically in login.php via the username parameter (u). The root cause is unsafely constructed SQL in the login routine, enabling remote attackers to execute arbitrary SQL and bypass authentication. The linked document...

CVE-2006-0134

Cross-site scripting XSS vulnerability in register.php in TheWebForum twf 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter...

CVE-2006-0134

The CVE-2006-0134 vulnerability concerns TheWebForum (twf) version 1.2.1, specifically the register.php script. The issue is a cross-site scripting (XSS) flaw that accepts user input via the www parameter and does not sufficiently sanitize it, enabling remote attackers to inject arbitrary web scr...

EV0017.txt

New eVuln Advisory: TheWebForum Script Insertion and Authentication Bypass --------------------Summary---------------- Vendor: TheWebForum Group Software: TheWebForum Sowtware's Web Site: http://sourceforge.net/projects/twf/ Versions: 1.2.1 Critical Level: Moderate Type: Multiple Vulnerabilities...

[eVuln] TheWebForum Script Insertion and Authentication Bypass

New eVuln Advisory: TheWebForum Script Insertion and Authentication Bypass --------------------Summary---------------- Vendor: TheWebForum Group Software: TheWebForum Sowtware's Web Site: http://sourceforge.net/projects/twf/ Versions: 1.2.1 Critical Level: Moderate Type: Multiple Vulnerabilities...