Description - Multiple Vulnerabilities in ADNForum

Multiple Vulnerabilities found in ADNForum script.

Exploit: Available
Solution: Not available - check Agustin Dondo website

1. ADNForum has multiple SQL injection vulnerabilities.

All user-defined data isn't properly sanitized before being used in SQL queries. This can be used to make any SQL query by injecting arbitrary SQL code.

Condition: magic_quotes_gpc: off

2. Multiple XSS Vulnerabilities.

All user-defined data isn't properly sanitized before being posted. This can be used to post any html or script code.

Order Source Code Audit

Protect against hacking by PHP code audit of your site done by eVuln team.The work will be done by specialists in website security.