CVE-2009-2150: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Campus Virtual-LMS allow 1 remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a ...

Campus Virtual-LMS (XSS/SQL Injection) Multiple Remote Vulnerabilities

No description provided by source. +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

Campus Virtual-LMS (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Campus Virtual-LMS XSS/SQL Injection Multiple Remote Vulnerabilities ======================================================================...

Campus Virtual-LMS XSRF / XSS / SQL Injection

+-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

campus virtual-lms - Cross-Site Scripting SQL Injection

campus virtual-lms - Cross-Site Scripting SQL Injection +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009...

campus virtual-lms - Cross-Site Scripting / SQL Injection

+-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Dokeos LMS = 1.8.5 "include" Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with "html" extension. The issue is...

Dokeos Lms 1.8.5 - 'Include' Remote Code Execution

!/usr/bin/perl Dokeos LMS = 1.8.5 "include" Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with "html" extension. The issue is due to 'userportal.php' script not...

Dokeos LMS <= 1.8.5 (include) Remote Code Execution Exploit

Exploit for unknown platform in category web applications...

Dokeos Lms 1.8.5 - Include Remote Code Execution

Dokeos Lms 1.8.5 - Include Remote Code Execution !/usr/bin/perl Dokeos LMS = 1.8.5 "include" Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with "html" extension...

Dokeos LMS 1.8.5 Code Execution

!/usr/bin/perl Dokeos LMS = 1.8.5 "include" Remote Code Execution Exploit Description --------------------------------------------------------------- Dokeos LMS contains one flaw that allows an attacker to include a local file with "html" extension. The issue is due to 'userportal.php' script not...

Dokeos LMS 1.8.5 PHP Code Injection

striptags$el2'; 108. break; 109. case SORTSTRING : 110. $comparefunction = 'strnatcmpTableSort::orderingstringstriptags$el1...

Dokeos LMS <= 1.8.5 (whoisonline.php) PHP Code Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Dokeos LMS = 1.8.5 whoisonline.php PHP Code Injection Exploit ================================================================ ?php /...

Dokeos Lms 1.8.5 - 'whoisonline.php' PHP Code Injection

striptags$el2'; 108. break; 109. case SORTSTRING : 110. $comparefunction = 'strnatcmpTabl...

Dokeos LMS &lt;= 1.8.5 (whoisonline.php) PHP Code Injection Exploit

No description provided by source. ?php / ----------------------------------------------------------------------- Dokeos LMS = 1.8.5 whoisonline.php Remote PHP Code Injection Exploit ----------------------------------------------------------------------- author...: EgiX mail.....:...

CVE-2008-4777

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

Sql injection

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

CVE-2008-4777

CVE-2008-4777 describes an SQL injection in the Showroom Joomlearn LMS (com_lms ) for Joomla! and Mambo . The vulnerability allows remote attackers to execute arbitrary SQL commands through the cat parameter in the showTests task, indicating a directly exploitable backend data access flaw. The ro...

CVE-2008-4777

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

CVE-2008-4777: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...