Show filters
35 Total Results
Displaying 21-30 of 35
Sort by:
Attacker Value
Unknown
CVE-2007-2182
Disclosure Date: April 24, 2007 (last updated October 04, 2023)
Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter.
0
Attacker Value
Unknown
CVE-2006-7088
Disclosure Date: March 02, 2007 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to (1) logon_user.php and (2) update_profile.php.
0
Attacker Value
Unknown
CVE-2007-0826
Disclosure Date: February 07, 2007 (last updated October 04, 2023)
SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
0
Attacker Value
Unknown
CVE-2006-6089
Disclosure Date: November 24, 2006 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the (1) title (Subject), (2) groupname (Group Name), or (3) detail (Message) field.
0
Attacker Value
Unknown
CVE-2006-2870
Disclosure Date: June 06, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable.
0
Attacker Value
Unknown
CVE-2006-2807
Disclosure Date: June 05, 2006 (last updated October 04, 2023)
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.
0
Attacker Value
Unknown
CVE-2006-1157
Disclosure Date: March 12, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php.
0
Attacker Value
Unknown
CVE-2005-4249
Disclosure Date: December 15, 2005 (last updated February 22, 2025)
ADP Forum 2.0 through 2.0.3 stores sensitive information in plaintext files under the web document root with insufficient access control, which allows remote attackers to obtain user credentials via requests to the forum/users directory.
0
Attacker Value
Unknown
CVE-2005-4165
Disclosure Date: December 11, 2005 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the "Search For" field in search.asp.
0
Attacker Value
Unknown
CVE-2005-3422
Disclosure Date: November 01, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web script or HTML via the error parameter.
0
