Sql injection

Multiple SQL injection vulnerabilities in GR Board aka grboard 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the 1 tableType or 2 blindTarget parameter to view.php, 3 the delTargets0 parameter to viewmemo.php, or 4 the isReported parameter to writeok.php...

CVE-2006-3070: Undefined Security Weakness

writeok.php in Zeroboard 4.1 pl8, when installed on Apache with modmime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe...