Vulnerabilities

TI-2006-04458 CVE-2006-4612 · GHSA-6hp8-c2cm-f6x3

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to…

LOW 35

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01288 Published 2006-09-07 No fix listed

TI-2006-02472 CVE-2006-2541 · GHSA-j3rc-245m-g2fr

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to…

LOW 37

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to (1) login.asp and (2) main.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02125 Published 2006-05-23 No fix listed

TI-2005-04078 CVE-2005-4334 · GHSA-3hm3-cqwp-pq23

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary…

LOW 35

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter to (1) zixforum/forum.asp, as used in (2) Headforums.asp and (3) Subject.asp.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01162 Published 2005-12-17 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to…

SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to…

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary…