PT-2013-4468

Name of the Vulnerable Software and Affected Versions Todoo Forum version 2.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the id post or pg parameters in the todooforum.ph...

CVE-2013-3537: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

CVE-2013-3538: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

PT-2013-4467

Name of the Vulnerable Software and Affected Versions Todoo Forum version 2.0 Description The issue concerns SQL injection vulnerabilities in the todooforum.php file. Remote attackers can execute arbitrary SQL commands by manipulating the id post or pg parameters. Recommendations For Todoo Forum...

CVE-2010-0938: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the idforum parameter in a post action...