10 matches found
CVE-2020-35337: Improper Neutralization of Special Elements used in an SQL Command
ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title parameter, which allows remote attackers to execute arbitrary SQL commands...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site:...
CVE-2009-4348: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146...
PT-2009-5921 · Power · Power Bulletin Board
Name of the Vulnerable Software and Affected Versions: Power Bulletin Board versions 2.0.2 and earlier Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "new topic" action. This occurs in the forums/index.php file...
CVE-2009-1259
SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...
Directory traversal
Multiple directory traversal vulnerabilities in index.php in Flat PHP Board 1.2 and earlier allow remote attackers to 1 create arbitrary files via a .. dot dot in the username parameter when registering a user account, and 2 read arbitrary PHP files via a .. dot dot in a the topic parameter in a...
CVE-2006-5209
PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5209: Undefined Security Weakness
PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site:...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x -...