14 matches found
EUVD-2007-1832
Malware in sbrugna...
secure.friendfinder.com XSS vulnerability
Vulnerable URL: https://secure.friendfinder.com/p/register.cgi?city=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3E/regpage/1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...
DailyMotion Hack Leaks Emails, Passwords of 87M Users
DailyMotion, a popular video sharing website, said Tuesday it recently suffered an “external security problem” resulting in the compromise of an unspecified number of its users’ data. LeakedSource.com, a repository of breached data, added DailyMotion to its list of “Hacked Sites” on Monday. The...
Adult FriendFinder Vulnerability Leaves Millions Exposed, Report Claims
Adult website Adult FriendFinder may have been compromised by a hacker who said he has gained access to the site’s backend servers and posted allegedly compromised data to his Twitter feed. The breach has not been confirmed by the site’s parent company FriendFinder Networks, which says it is...
XOOPS Module Friendfinder SQL Injection (CVE-2007-1838)
An SQL injection vulnerability has been reported in Xoops Friendfinder Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Sql injection
SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1838
SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1838: Undefined Security Weakness
SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1838
CVE-2007-1838 describes an SQL injection in the Friendfinder module for XOOPS (version 3.3 and earlier) . The vulnerability affects the view.php component, where an attacker can manipulate the id parameter to execute arbitrary SQL commands on the back-end database. The provided documents confirm ...
CVE-2007-1838
SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Module Friendfinder 3.3 - view.php?id SQL Injection
XOOPS Module Friendfinder 3.3 - view.php?id SQL Injection !/usr/bin/perl Script Name: Xoops Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ;...
XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== XOOPS Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR...
XOOPS Module Friendfinder 3.3 - 'view.php?id' SQL Injection
!/usr/bin/perl Script Name: Xoops Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Xoops Module Friendfinder = 3.3 view.php id BLIND SQL Injection Exploit Coded by : ajann Author : ajann Dork : "inurl:/modules/friendfinder/" Contact : : S.Page : http://www.xoops.org/ $$ : Free .. : ajann,Turkey use IO::Socket; if@AR...