25 matches found
CVE-2005-3305: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the 1 forumid or 2 threadid parameter in the Forum file, 3 the linkid in the Links file, 4 the artid parameter in the Sections file, and 5 the dlid parameter in the Download file...
CVE-2003-1162: Undefined Security Weakness
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the threadid, forumid, and sid parameters...
CVE-2004-2062: Undefined Security Weakness
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the 1 threadid, 2 parentid, or 3 mode parameters...
php-fusion 4.x vuln
TheGreatOne2176, Reapercore I have a found an error in php-fusion 4.x where you can view any thread on the forum. In fusionforum/viewthread.php the $GET variables arent properly checked or queried making it possible to view all threads. The example I tested was...