PHP-Nuke Downloads Module - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/27932/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

Sql injection

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

CVE-2008-0652

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

CVE-2008-0652

The CVE-2008-0652 entry describes an SQL injection in index.php of the Mambo/Joomla! Downloads (com_downloads) component. The vulnerability allows remote attackers to inject arbitrary SQL via the filecatid parameter in a selectfolder action. This exposes the possibility of unauthorized data expos...

CVE-2008-0652

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

mtcms-sql.txt

...:::::MTCMS =2.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie2004...

wwwstatsHack.txt

!/bin/sh [email protected] if $ -ne 3 then echo "Usage: $0 " echo "Example: $0 http://www.victym.com/wwwstats window.location="http://www.evilhost.com" 100" exit fi echo 'Attacking, wait a moment' for i in seq 1 $3; do echo "$1/clickstats.php?link=$2"; curl "$1/clickstats.php?link=$2" -e...

CVE-2004-2752

Cross-site scripting XSS vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action...

CVE-2004-2752

PostNuke’s Downloads module (≤0.726) is affected by a cross-site scripting (XSS) flaw in the viewdownloaddetails action, triggered via the ttitle parameter. This allows remote injection of arbitrary HTML/JavaScript. The description is corroborated across CVE/NVD/Red Hat records; one connected EUV...

CVE-2004-2752: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action...

WebDesktop 0.1 - Remote File Inclusion

\|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : WebDesktop 0.1 Download : http://downloads.sourceforge.net/pns-webdesktop/webDesktop-0.1-linux.tar.gz Author : S.W.A.T. HomePage : wWw.XmorS.CoM Type : Remote File Inclusion Y!...

Fixed XSS vulnerability at www.ptgamers.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.ptgamers.com, which at the time of submission ranked 27095 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is currentl...

Unfixed XSS vulnerability at www.ddruk.com

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.ddruk.com, which at the time of submission ranked 162510 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/03/2007. It is currently...

Unfixed XSS vulnerability at www.warez-downloads.net

Security researcher flux, has submitted on 22/09/2007 a cross-site-scripting XSS vulnerability affecting www.warez-downloads.net, which at the time of submission ranked 85177 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

neuron news 1.0 (index.php q) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ neuron news 1.0 index.php q Local File Inclusion Vulnerability ================================================================ \|/// \ - - // Y! Underground Group @ @...

SOL7854 - Web Applications Content Processing Scripts vulnerability

F5 Product Development tracked this issue as CR81839 and it was fixed in FirePass 6.0.2. For information about upgrading, refer to the FirePass release notes. Additionally, cumulative hotfix HF-552-10 has been issued for FirePass 5.5.2, cumulative hotfix HF-600-15 has been issued for FirePass 6.0...