Security Vulnerabilities, CVEs, Published In June 2011 (Sql injection)
Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.
Max CVSS
7.5
EPSS Score
0.21%
Published
2011-06-21
Updated
2012-12-20
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
Max CVSS
7.5
EPSS Score
0.14%
Published
2011-06-21
Updated
2018-08-13
Multiple SQL injection vulnerabilities in A Really Simple Chat (ARSC) 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the (1) arsc_user parameter to base/admin/edit_user.php, (2) arsc_layout_id parameter in base/admin/edit_layout.php, or (3) arsc_room parameter to base/admin/edit_room.php.
Max CVSS
7.5
EPSS Score
0.17%
Published
2011-06-29
Updated
2011-06-30
3 vulnerabilities found