4227 matches found
AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================== AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability ========================================================================...
AJ Article 1.0 - featured_article.php SQL Injection
AJ Article 1.0 - featuredarticle.php SQL Injection --==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==--...
CVE-2008-2135: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 contentname parameter to showdetails.php and the 2 article parameter to printer.php...
Sql injection
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2094
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2094
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-2094
CVE-2008-2094 : The provided documents describe a SQL injection vulnerability in the XOOPS Article Module, specifically in article.php via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands through user-supplied input, thereby potentially exposing or al...
CVE-2008-2094: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Article Module article.php id Parameter SQL Injection
The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/article.php' script before using it to build a database query...
xoopsall-sql.txt
/Cr@zyKing / http://coderx.org Xoops All Version -Articles- Article.PHP ID Blind SQL Injection ExpL0it Sql 1-2 article.php?id=3+union+select+1,2,3,4,5,6,AESDECRYPTAESENCRYPTUSER,0x71,0x71,8,9,0,1,2,3,4,5,6,7,8,9,0/...
XOOPS 2.0.14 Article Module - 'article.php' SQL Injection
source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
XOOPS 2.0.14 Article Module - article.php SQL Injection
XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
BosNews 4.0 - 'article' SQL Injection
By CrackersChild [email protected] BosNews v4.0 Remote Sql injection Exploit Script website:http://www.bosdev.com Exploit : " site.com/path/news.php?news=more&article=248+union%20select%200,1,username,password,4%20from%20bosdevUUS/ milw0rm.com 2008-04-14...
CVE-2008-1533
CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...
CVE-2008-1533: Undefined Security Weakness
Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...
Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Mambo Component Comments = 0.5.8.5g SQL Injection Vulnerability ================================================================ Mambo SQL Injection comcomments Version...
C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
Background ----------------- GE-Fanuc's Proficy Information Portal 2.6 is a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can access bo...
Sql injection
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...
CVE-2008-0451: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...