Dante90

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `secid` parameter in a "listarticles" action when the Tutorial module is enabled.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of users for requests related to a logout, probably a forced logout.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `poster` parameter in the reputation.php file of the Reputation plugin for PunBB.

The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the `pun user[language]` parameter when `register globals` is enabled and `magic quotes gpc` is disabled.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `rid` parameter in a "viewrecords" action to "modules.php".

The issue concerns SQL injection vulnerabilities in the affiliates.php file of the Affiliation module for PunBB. Remote attackers can execute arbitrary SQL commands by manipulating the `in` or `out` parameters.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `out` parameter in the voteforus.php file.

The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the "url" parameter in the Add operation to "modules.php".