ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

Overview ViewSonic vCast software, which is included in ViewBoard smartboard devices, contains multiple vulnerabilities that an attacker can chained to achieve full device compromise. Description ViewSonic ViewBoards are widely used smart display devices smartboard, typically deoloyed in enterpri...

tForum b0.915 Cross Site Scripting / SQL Injection

Exploit Title: tForum b0.915 Vulnerabilities Dork: intext:"powered by tForum b0.915" Author: snup Contact: [email protected] SQL Injection: DORK: inurl:"viewtopic.php?TopicID=" intext:"powered by tForum b0.915" inurl:"viewboard.php?BoardID=" intext:"powered by tForum b0.915"...

eoCMS SQL injection vulnerability

No description provided by source. eoCMS SQL injection vulnerability 1. General information eoCMS is an open source code software which is used to develop Internet forum http://eocms.com/. On October 15, 2009, Bkis Security detected a SQL injection vulnerability in some functions of eoCMS. This i...

[Bkis-12-2009] eoCMS SQL injection vulnerability - Bkis Report

eoCMS SQL injection vulnerability 1. General information eoCMS is an open source code software which is used to develop Internet forum http://eocms.com/. On October 15, 2009, Bkis Security detected a SQL injection vulnerability in some functions of eoCMS. This is a critical vulnerability which...

CVE-2008-2996: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Gravity Board X GBX 2.0 Beta, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchquery parameter in a getsearch action, and the 2 boardid parameter in a viewboard action...