CVE-2008-6867

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2008-6867: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in content.php in Scripts For Sites SFS EZ Career allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-6727

SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

Security alert: Twitter porn names scam

From PC World Aurora Dizon The “Twitter porn names” game, currently Twitter’s top trending topic, may be a fun distraction that gives you and your friends something to tweet about. But it also has a security hole–one that is no technical snafu. It could be simple human error, but it’s also possib...

CVE-2009-1259

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...

Orca 2.0.2 Cross Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 - 'topic ' Cross-Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 - topic Cross-Site Scripting

Orca 2.0.2 - topic Cross-Site Scripting --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 +...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Orca 2.0.2 Topic Remote XSS Vulnerability =========================================== --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xs...

RiotPix 0.61 - forumid Blind SQL Injection

RiotPix 0.61 - forumid Blind SQL Injection \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...

Cross site scripting

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-5435

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-5435: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via a topic subject...

CVE-2008-4075: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the topic parameter...

cyberBB 0.6 - Multiple SQL Injections

Name : cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more... Conditions : Magic quotes gpc = On & Off / User must be logged into source of /showtopic.php : 21. $id=$REQUEST'id'; 22. 23...

CVE-2008-2861: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

ASPPortal Free Version - 'Topic_Id' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

CVE-2008-2532

SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2334: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to a admin/philboardadmin-forumedit.asp, b admin/philboardadmin-forum.asp, and c W1L3D4forumayenikonuac.asp; the 2 id parameter to d W1L3D4konuoku.as...

CVE-2008-2131: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...