PT-2012-5178

Name of the Vulnerable Software and Affected Versions ASP-DEv XM Forums version RC3 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by exploiting the id parameter in the following API endpoints: "profile.asp", "forum.asp", or "topic.asp"...

CVE-2012-4060: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Forums RC3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 profile.asp, 2 forum.asp, or 3 topic.asp...

CVE-2005-4259: Undefined Security Weakness

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 TID parameter in topic.asp, 2 FORUMID parameter in forum.asp, and 3 PROFILEID parameter in profile.asp. NOTE: the provenance of this issue is unknown; the details are obtained...