CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

Web Wiz Forums字符串过滤SQL注入漏洞

Web Wiz Forums是一款基于ASP的WEB应用程序。 Web Wiz Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'page.asp'脚本对用户提交的'NewsID'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Web Wiz Forums 8.05a之前版本 升级到最新版本： http://www.webwizguide.info/news/newsitem.asp?NewsID=103 form method="post"...

Web Wiz Forums 8.05 (MySQL version) SQL Injection

There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...

webwiz805-sql.txt

There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...

CVE-2007-1548

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

Sql injection

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

CVE-2007-1548

CVE-2007-1548 : SQL injection in Web Wiz Forums (functions/functions_filters.asp) prior to version 8.05a (MySQL) due to improper filtering of certain characters in SQL commands. This allows remote attackers to execute arbitrary SQL via crafted input (e.g., the name parameter to forum/pop_up_membe...

CVE-2007-1548

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

Web Wiz Forums 8.05 - String Filtering SQL Injection

source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Web Wiz Forums 8.05 - String Filtering SQL Injection

Web Wiz Forums 8.05 - String Filtering SQL Injection source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CVE-2006-5635

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5635

CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...

CVE-2006-5635

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

Web Wiz Forums forum/search.asp KW Parameter SQL Injection (deprecated)

Binary data 3801.prm...

Web Wiz Forum 6.347.x - search.asp SQL Injection

Web Wiz Forum 6.347.x - search.asp SQL Injection source: https://www.securityfocus.com/bid/20778/info Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...

Web Wiz Forum 6.34/7.x - 'search.asp' SQL Injection

source: https://www.securityfocus.com/bid/20778/info Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access ...

Web Wiz Forums 7.01 - members.asp Cross-Site Scripting

Web Wiz Forums 7.01 - members.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20054/info Web Wiz Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script co...

Web Wiz Forums 7.01 - 'members.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20054/info Web Wiz Forums is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in th...

XSS in Web Wiz Forums

=info= Little filter evasion of Web Wiz Forums filters. The vuln lies in the avatar from url. =exploit= You have to post "img src="java scri pt:ale rt'xss'" after the url. =handicap= It is not that serious because the field takes only 95 chars and it works only for IE and Opera.Firefox survived i...

Cross site scripting

Cross-site scripting XSS vulnerability in searchform.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter...