CVE-2008-4777

CVE-2008-4777 describes an SQL injection in the Showroom Joomlearn LMS (com_lms ) for Joomla! and Mambo . The vulnerability allows remote attackers to execute arbitrary SQL commands through the cat parameter in the showTests task, indicating a directly exploitable backend data access flaw. The ro...

CVE-2008-4777: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Showroom Joomlearn LMS comlms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task...

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection

Joomla! Mambo Component Showroom Joomlearn LMS - cat SQL Injection source: https://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an S...

Joomla! / Mambo Component Showroom Joomlearn LMS - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28586/info The Joomlearn LMS component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...

efront-312-xss.txt

fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: efront e-learning LMS 3.1.2 http://www.efrontlearning.net/ Vulnerable: http://site/index.php?message=xss...

Immunity Canvas: LMS_INCLUDE

Name| lmsinclude ---|--- CVE| CVE-2007-3325 Exploit Pack| CANVAS Description| LMS Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: lms.org.pl CVE Url: https://vulners.com/cve/CVE-2007-3325 CVE Name: CVE-2007-3325...

CVE-2007-3325

CVE-2007-3325 describes a PHP remote file inclusion vulnerability in LMS (LAN Management System) versions 1.9.6 and earlier. The flaw resides in lib/language.php, where an attacker can cause arbitrary PHP code execution by supplying a malicious URL via the _LIB_DIR parameter (a vector distinct fr...

LAN Management System (LMS) <= 1.9.6 Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

LAN Management System (LMS) <= 1.9.6 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================== LAN Management System LMS = 1.9.6 Remote File Inclusion Exploit ================================================================== !/usr/bin/perl LMS - LAN Management Syste...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

LAN Management System LMS 1.9.6 - Remote File Inclusion !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

LMS RTMessageAdd.PHP远程文件包含漏洞

LMS是一款基于PHP的WEB应用程序。 LMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'RTMessageAdd.PHP'脚本对用户提交的'LIBDIR'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 LMS LAN Management System 1.5.4 LMS LAN Management System 1.5.3 目前没有解决方案提供： http://www.lms.org.pl/index.php...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

CVE-2007-2205

This CVE (CVE-2007-2205) is a PHP remote file inclusion in LAN Management System (LMS) prior to or around version 1.5.3/1.5.4. The vulnerability is triggered in modules/rtmessageadd.php via the _LIB_DIR parameter, enabling an attacker to load a crafted URL and execute arbitrary PHP code. The avai...

CVE-2007-2205

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

CVE-2007-2198

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2198

CVE-2007-2198 describes a cross-site scripting (XSS) vulnerability in the LAN Management System (LMS) prior to 1.6.9. The issue allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors, with likely involvement of the OD parameter in contrib/formularz_przelewu_wplaty...

CVE-2007-2198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LAN Management System LMS before 1.6.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably involving the OD parameter to contrib/formularzprzelewuwplaty/druk.php...

CVE-2007-2205: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System LMS 1.5.3, and possibly 1.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter, a different vector than CVE-2007-1643...

lms 1.5.3 Remote File Inclusion

lms 1.5.3 Remote File Inclusion Affected Software .: lms 1.5.3 libs Download..: http://www.lms.org.pl/download/1.5/ Risk ..............: high Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............: Www.InyeXion.com.ar Affected File: /modules/rtmessageadd.php...

Lms 1.5.x - 'RTMessageAdd.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23611/info LMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...