Sql injection

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-0821

CVE-2006-0821 affects BXCP 0.299 and relates to a vulnerability in index.php where the tid parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The root cause, as described across multiple sources, is vulnerable input handling in the application’s SQL q...

CVE-2005-2299

Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...

CVE-2005-2299

Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...