Chiekh Bouchenafa

2 exploits Active since May 2013

CVE-2013-3538 EXPLOITDB text WORKING POC

Todoo Forum 2.0 - Cross-Site Scripting via id_post or pg Parameter

Multiple cross-site scripting (XSS) vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id_post or (2) pg parameter.

View Code

CVE-2013-3537 EXPLOITDB text WRITEUP

Todoo Forum 2.0 - SQL Injection via id_post or pg Parameter

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_post or (2) pg parameter.

View Code