37 matches found
EUVD-2008-2330
Malware in sbrugna...
EUVD-2008-5169
Malware in sbrugna...
EUVD-2007-3125
Malware in sbrugna...
EUVD-2007-2633
Malware in sbrugna...
EUVD-2007-4008
Malware in sbrugna...
EUVD-2008-5170
Malware in sbrugna...
CVE-2008-5192
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...
CVE-2008-5193
CVE-2008-5193 describes a Cross-site scripting (XSS) vulnerability in W1L3D4 Philboard, specifically in the file search.asp for versions 1.14 and 1.2. The underlying issue allows an attacker to inject arbitrary web script or HTML via the searchterms parameter. The related CVE notes a potential ov...
CVE-2008-5192
SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...
CVE-2008-5193
Cross-site scripting XSS vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: this might overlap CVE-2007-4024...
CVE-2008-5192
CVE-2008-5192 concerns a SQL injection vulnerability in forum.asp of W1L3D4 Philboard versions 1.14 and 1.2, exploitable via the forumid parameter. The root cause is an unsafely handled input for forumid that allows arbitrary SQL execution by an attacker. Connected records corroborate the vulnera...
CVE-2008-2334
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to a admin/philboardadmin-forumedit.asp, b admin/philboardadmin-forum.asp, and c W1L3D4forumayenikonuac.asp; the 2 id parameter to d W1L3D4konuoku.as...
Sql injection
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to a admin/philboardadmin-forumedit.asp, b admin/philboardadmin-forum.asp, and c W1L3D4forumayenikonuac.asp; the 2 id parameter to d W1L3D4konuoku.as...
CVE-2008-2334
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 forumid parameter to a admin/philboardadmin-forumedit.asp, b admin/philboardadmin-forum.asp, and c W1L3D4forumayenikonuac.asp; the 2 id parameter to d W1L3D4konuoku.as...
CVE-2008-1939
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...
Sql injection
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...
CVE-2008-1939
Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 topic parameters to a philboardreply.asp, and the 3 forumid parameter to b philboardnewtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920...
CVE-2008-1939
Concrete details show SQL injection vulnerabilities in W1L3D4 Philboard components across multiple versions (e.g., 0.5, 1.0, 1.14, 1.2) via user-supplied parameters (forumid, id, topic) in various ASP scripts (admin/ paths and forum/ paths). The root cause is improper handling of input leading to...
CVE-2007-4024
Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in W1L3D4aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...