38 matches found
CVE-2006-4709
The CVE-2006-4709 entry concerns a SQL injection vulnerability in topic.php of Vikingboard 0.1b, exploitable via the s parameter to allow remote execution of arbitrary SQL commands. Related connected records confirm Vikingboard 0.1b as the affected product and topic.php as the vulnerable componen...
CVE-2006-4709: Undefined Security Weakness
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter...
Vikingboard 0.1b Multiple Vulnerabilities
================================================ :: Vikingboard 0.1b Multiple Vulnerabilities :: ================================================ Software : Vikingboard Website : http://www.vikingboard.com/ Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerabilities...
CVE-2006-3149: Undefined Security Weakness
Cross-site scripting XSS vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter...
CVE-2006-0350
Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...
CVE-2006-0350
The CVE-2006-0350 entry concerns an XSS vulnerability in eggblog 2.0. The flaw allows remote attackers to inject arbitrary Web script or HTML via the message field to topic.php. NVD records a base score of 4.3 (MEDIUM) with network attack vector, no confidentiality or availability impact, and par...
CVE-2006-0350: Undefined Security Weakness
Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...
CVE-2005-3872
The CVE-2005-3872 entries describe multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands through parameters in forum.php (FORUM_ID) and topic.php (TOPIC_ID, FORUM_ID, CAT_ID). Affected software: Ugroup 2.6.2 and earl...
CVE-2005-3873: Undefined Security Weakness
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...
CVE-2005-3872: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID parameter in forum.php, and the 2 TOPICID, 3 FORUMID, and 4 CATID parameters in topic.php...
Ugroup 2.6.2 SQL inj. vuln.
Ugroup 2.6.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/ugroup-262-sql-inj-vuln.html Vendor:http://www.realsoftstudio.com/Ugroup/ affected version:2.6.2 and prior Product Description: A Software discussion platform written in PH...
ShockBoard 3.04.0 - Offset SQL Injection
ShockBoard 3.04.0 - Offset SQL Injection source: https://www.securityfocus.com/bid/15592/info ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
CVE-2005-2989: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter to topic.php, the uid parameter to 2 misc.php or 3 pm.php, or the fid parameter to 3 forums.php or 4 newpost.php...
bmforumXSS.txt
Multiple Cross site scripting in BMForum vendor url:http://www.bmforum.com/ Advisore:http://lostmon.blogspot.com/2005/07/ multiple-cross-site-scripting-in.html Vendor notify:yes Exploit available:yes BMForum contains a flaw that allows a remote cross site scripting attack.This flaw exists because...
CVE-2005-1568
CVE-2005-1568 affects DirectTopics 2.1 and 2.2. The flaw arises in topic.php where an invalid topic parameter can cause the server to disclose the path in an error message, leaking sensitive information. The NVD metrics indicate a base score of 5.0 (Medium) with network access required and no aut...
CVE-2005-1568: Undefined Security Weakness
topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to obtain sensitive information via an invalid topic parameter, which reveals the path in an error message...
CVE-2005-1567: Undefined Security Weakness
SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter...