EUVD-2005-4722

Malware in sbrugna...

VBZooM Forum 1.11 contact.php UserID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issue...

VBZoom Forum 1.11 Show.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14383/info VBZooM Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

VBZoom Forum 1.11 Show.PHP MainID SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16955/info VBZooM Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

VBZoom 1.0/1.11 login.php UserID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issue...

VBZooM Forum 1.11 comment.php UserID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issue...

CVE-2005-4729

CVE-2005-4729 describes an SQL injection in VBZooM Forum, in show.php via the SubjectID parameter. This allows remote execution of arbitrary SQL commands against the application. Connected records also reference the same subject (e.g., CVE-2006-1132 notes the MainID vector and confirms SubjectID ...

VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting

VBZooM Forum 1.11 - contact.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

VBZooM Forum 1.11 - 'contact.php?UserID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting

VBZooM Forum 1.11 - comment.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/16956/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

VBZoom Forum 1.11 - show.php MainID SQL Injection

VBZoom Forum 1.11 - show.php MainID SQL Injection source: https://www.securityfocus.com/bid/16955/info VBZooM Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

CVE-2005-4729

SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via the SubjectID parameter...

VBZoom 1.0/1.11 - 'profile.php?Username' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

VBZoom 1.01.11 - login.php?UserID Cross-Site Scripting

VBZoom 1.01.11 - login.php?UserID Cross-Site Scripting source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may levera...

VBZoom 1.0/1.11 - 'login.php?UserID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code...

VBZoom Forum 1.11 - 'show.php' SQL Injection

source: https://www.securityfocus.com/bid/14383/info VBZooM Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Reset any user's password in VBZoom forums

Name: VBZoom Version Affected: tested on v1.01 maybe other version vulnerable also Severity: Critical Category: Password reset Vendor URL: http://www.vbzoom.com Author: hishhish [email protected] Date: discloused on 28th August 2002 Published at 8th oct 2002 Description VBZooM is bulletin...