EUVD-2010-0963

Malware in sbrugna...

EUVD-2013-3473

Malware in sbrugna...

EUVD-2013-3472

Malware in sbrugna...

CVE-2013-3538

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3537

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

Sql injection

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3538

CVE-2013-3538 describes multiple XSS vulnerabilities in Todoo Forum 2.0, specifically in the file todooforum.php via parameters (1) id_post or (2) pg. The NVD entry notes a MEDIUM severity (CVSS2 base score 4.3) with user interaction not required and partial integrity impact. Connected records co...

CVE-2013-3537

CVE-2013-3537 affects Todoo Forum 2.0 (todooforum.php). The vulnerability is multiple SQL injection via the id_post or pg parameters, enabling remote SQL command execution. Root cause: improper input handling allows injection. Impact: potential data disclosure/modification, depending on the DB. C...

CVE-2013-3538

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3537

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

Todoo Forum 2.0 - todooforum.php Multiple SQL Injections

Todoo Forum 2.0 - todooforum.php Multiple SQL Injections source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials,...

Todoo Forum 2.0 Cross Site Scripting / SQL Injection

SQL Injection + Parameter : idpost + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=Injecthere&pg=1 + Parameter : pg + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=1&pg=InjectHere + Cross-site scripting + Parameter : idpost +...

Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities

Todoo Forum 2.0 - todooforum.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based...

Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

Todoo Forum 2.0 - 'todooforum.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

Todoo Forum 2.0 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ================================================== Todoo Forum 2.0 Cross Site Scripting Vulnerability ================================================== + Note : Tribute to the martyrs of Gaza . ========== + Todoo Forum 2.0 xss Cross Site...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

Cross site scripting

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...

CVE-2010-0938

The connected documents confirm CVE-2010-0938 is an XSS in TodoOforum/Todoo Forum 2.0, where the vulnerability is triggered via the id_forum parameter in a post action. Affected component: todooforum.php. Root cause: improper handling of input leading to arbitrary script/HTML injection. Impact: r...