EUVD-2007-0604

Malware in sbrugna...

EUVD-2010-4832

Malware in sbrugna...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

No description provided by source. W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Author: R00TATI Contact: [email protected] - http://www.ihteam.net Exploit :...

W-Agora 4.2.1 change_password.php userid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

W-Agora 4.2.1 SQL Injection

HTTPCS Advisory : HTTPCS79 Product : w-agora Version : 4.2.1 Date : 2012-08-17 Criticality level : Highly Critical Description : A vulnerability has been discovered in w-agora, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the 'pattern' parameter to...

CVE-2010-4867

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

W-Agora 4.2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Packet Storm! I want to warn you about Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection and Denial of Service vulnerabilities in W-Agora. SecurityVulns ID: 11324. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous...

W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion

Hello Full-Disclosure! I want to warn you about new Cross-Site Scripting and Local File Inclusion vulnerabilities in W-Agora. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous versions. ---------- Details: ---------- XSS WASC-08:...

CVE-2007-6647

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter...

w-Agora 4.2.1 - 'cat' SQL Injection

W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes Site: http://w-agora.net Download: http://sourceforge.net/project/showfiles.php?groupid=3413 Exploit :...

Design/Logic Flaw

w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the 1 bn array parameter to index.php, which expects a string, and 2 certain parameters to deleteforum.php, which displays the path name in the resulting error message...

w-agora version 4.2.1 Information Disclosure Vulnerability

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...