PHP-post Web Forum 0.x.1.0 - 'pm.php?replyuser' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting

PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application...

abrior.txt

Azhteam Digital Security Team Abrior's Encore WebForum display.cgi Find by : soltandefacer www.azhteam.com Greetings; s.defacer - azhteam - lvl3hr - edi.programe Bugs File : /forumcgi/display.cgi? Display : http://www.target.com/encore/forumcgi/display.cgi? 1. search in Google --...

YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability

Title : YapBB = 1.2 Beta2 'find.php' SQL Injection Vulnerability ------------------------------------------ Author : x90cKyong Joo, Jung Published : 2006.5.16 E-mail : geinblues at gmail.com Site : http://www.chollian.net/jyj9782 ------------------------------------------ 0x01 Summary YapBB is a...

[eVuln] VEGO Web Forum SQL Injection Vulnerability

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

EV0001.txt

New eVuln Advisory: VEGO Web Forum SQL Injection Vulnerability --------------------Summary---------------- Vendor: VEGO Software: VEGO Web Forum Versions: 1.26 and earlier Critical Level: Moderate Type: SQL Injection Remote: yes Status: Unpatched Exploit: Available Solution: Not Available...

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

CVE-2006-0065

CVE-2006-0065 describes an SQL injection vulnerability in VEGO Web Forum versions up to and including 1.26, affecting (1) functions.php, (2) functions_update.php, and (3) functions_display.php. The flaw allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index....

CVE-2006-0065

SQL injection vulnerability in 1 functions.php, 2 functionsupdate.php, and 3 functionsdisplay.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the themeid parameter in index.php...

[SA18273] VEGO Web Forum "theme_id" SQL Injection Vulnerability

TITLE: VEGO Web Forum "themeid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18273 VERIFY ADVISORY: http://secunia.com/advisories/18273/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VEGO Web Forum 1.x http://secunia.com/product/6722/ DESCRIPTION:...

VEGO Web Forum 1.x - Theme_ID SQL Injection

VEGO Web Forum 1.x - ThemeID SQL Injection source: https://www.securityfocus.com/bid/16107/info VEGO Web Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

mylittle15_16b.txt

My Little Forum 1.5 / 1.6beta SQL Injection software: site: http://www.mylittlehomepage.net/mylittleforum software: "A simple web-forum that supports classical thread view message tree as well as messagebord view to display the messages. Requires PHP 4.1 and a MySQL database." 1 look at the...

Simple Machines Forum < 1.0.7 Code Injection

Binary data 3198.prm...

[UNIX] Discuz! Command Execution Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2002-2054

CVE-2002-2054 affects TeeKai Forum 1.2. Remote attackers can authenticate as the administrator and gain privileged web forum access by setting the valid_level cookie to admin. Exploitation details are not expanded in the provided documents beyond cookie manipulation; no remediation steps are spec...

CVE-2004-2178

SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2004-2177

CVE-2004-2177 affects DevoyBB Web Forum 1.0.0. Multiple sources (NVD, Red Hat, CVE list, OpenVAS NT/NESSUS) describe a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. OpenVAS notes additional vulnerability vectors (...

CVE-2004-2177

Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

phpBB 2.0.15 (highlight) Remote PHP Code Execution

Exploit for unknown platform in category web applications ================================================== phpBB 2.0.15 highlight Remote PHP Code Execution ================================================== tested and working /str0ke !/usr/bin/pyth0n this exploit for phpBB 2.0.15 print "\nphpBB...

Simple Machines Forum msg Parameter SQL Injection Vulnerability

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The installed version of SMF on the remote host fails to properly sanitize input to the 'msg' parameter before using it in SQL queries. By exploiting this flaw, an attacker can affect databa...