Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities ========================================================================= + Info: Software:...

Dream4 Koobi CMS 4.2.4/4.2.5/4.3.0 - Multiple SQL Injections

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Koobi CMS 4.3.0, 4.2.5, 4.2.4 Multiple Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

phpwebsitedownloads-sql.txt

powered by phpWebSitedownloads AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"mod.php?mod=downloads" EXPLOIT :...

SOL8508 - Cross-site scripting vulnerability in installControl.php3 page

A cross-site scripting XSS vulnerability exists in the FirePass installControl.php3 page, which is accessible prior to authentication. The installControl.php3 page fails to fully sanitize URL input before the web page content is sent to the browser. It is possible for an attacker to create web...

Sql injection

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0...

CVE-2008-1122: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ parameter to index.php. NOTE: it was later reported that this also affects Koobi CMS 4.2.4, 4.2.5, and 4.3.0...

phpnukedownloads-sql.txt

PHP-Nuke Module Downloads SQL Injectionsid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: sid "modules php name Downloads" DORK 2 : allinurl: sid"dop=viewsdownload" EXPLOIT : admin =...

PHP-Nuke Module Downloads SQL Injection(sid)

PHP-Nuke Module Downloads SQL Injectionsid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: sid "modules php name Downloads" DORK 2 : allinurl: sid"dop=viewsdownload" EXPLOIT : admin =...

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0849

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat function, a different vector than CVE-2008-0652...

CVE-2008-0849

CVE-2008-0849 is a SQL injection in index.php of the Downloads (com_downloads) component for Mambo/Joomla, exploitable via the cat parameter in a selectcat function. This is a different vector than CVE-2008-0652 (which uses filecatid in a selectfolder action). Connected sources confirm the affect...

PHP-Nuke Downloads Module - 'sid' SQL Injection

source: https://www.securityfocus.com/bid/27932/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

CVE-2008-0652

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

CVE-2008-0652

SQL injection vulnerability in index.php in the Downloads comdownloads component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in a selectfolder action...

CVE-2008-0652

The CVE-2008-0652 entry describes an SQL injection in index.php of the Mambo/Joomla! Downloads (com_downloads) component. The vulnerability allows remote attackers to inject arbitrary SQL via the filecatid parameter in a selectfolder action. This exposes the possibility of unauthorized data expos...