Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2007-1548
Disclosure Date: March 20, 2007 (last updated October 04, 2023)
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via \"' (backslash double-quote quote) sequences, which are collapsed into \'', as demonstrated via the name parameter to forum/pop_up_member_search.asp.
0
Attacker Value
Unknown
CVE-2006-5635
Disclosure Date: November 01, 2006 (last updated October 04, 2023)
SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter.
0
Attacker Value
Unknown
CVE-2005-2228
Disclosure Date: July 12, 2005 (last updated February 22, 2025)
Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.
0
