Multiple Vulnerabilities in Injader CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Injader CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Injader CMS 1.1 The vulnerability exists due to input sanitation error...

CVE-2008-5890

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5891

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5891

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2008-5890

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5890

CVE-2008-5890 concerns Injader (before 2.1.2) with an SQL injection in feeds.php. The vulnerability arises from unchecked input on the id parameter, enabling remote attackers to manipulate SQL commands. Affected component: feeds.php in Injader; root cause: improper input handling leading to SQL i...

CVE-2008-5891

Injader before 2.1.2 contains a Cross‑site Scripting (XSS) vulnerability in the profile editing functionality. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented impact includes partial integrity compromise without affecting confidentiality...

CVE-2008-5891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2008-5890: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in feeds.php in Injader before 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Injader CMS 2.1.1 SQL Injection

Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...

Injader CMS SQL Injection

Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...

Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability

No description provided by source. Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id=SQL magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...

Injader CMS 2.1.1 - 'id' SQL Injection

Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...

Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Injader CMS 2.1.1 id Remote SQL Injection Vulnerability ========================================================= Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL -...

Injader CMS 2.1.1 - id SQL Injection

Injader CMS 2.1.1 - id SQL Injection Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...

Injader 2.1.1 - SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/32843/info Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary script code in...

Injader 2.1.1 - SQL Injection HTML Injection

Injader 2.1.1 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/32843/info Injader is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injecti...