Sql injection

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

CVE-2013-3537

CVE-2013-3537 affects Todoo Forum 2.0 (todooforum.php). The vulnerability is multiple SQL injection via the id_post or pg parameters, enabling remote SQL command execution. Root cause: improper input handling allows injection. Impact: potential data disclosure/modification, depending on the DB. C...

CVE-2013-3538

CVE-2013-3538 describes multiple XSS vulnerabilities in Todoo Forum 2.0, specifically in the file todooforum.php via parameters (1) id_post or (2) pg. The NVD entry notes a MEDIUM severity (CVSS2 base score 4.3) with user interaction not required and partial integrity impact. Connected records co...

CVE-2013-3538

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

Todoo Forum 2.0 Cross Site Scripting / SQL Injection

SQL Injection + Parameter : idpost + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=Injecthere&pg=1 + Parameter : pg + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=1&pg=InjectHere + Cross-site scripting + Parameter : idpost +...

Todoo Forum 2.0 - 'todooforum.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/59069/info Todoo Forum is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

CVE-2010-0938

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...