Lucene search
+L

165 matches found

exploitpack
exploitpack
•added 2009/04/17 12:00 a.m.•33 views

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons Luja download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67 d00rk: intext:"site powered by limbo"...

1.1AI score
SaveExploits0
Prion
Prion
•added 2009/02/06 11:30 a.m.•26 views

Sql injection

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

7.5CVSS9.1AI score0.00967EPSS
SaveExploits2References4
NVD
NVD
•added 2009/02/06 11:30 a.m.•29 views

CVE-2008-6078

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

7.5CVSS8.3AI score0.00967EPSS
SaveExploits2References4
CVE
CVE
•added 2009/02/06 11:00 a.m.•69 views

CVE-2008-6078

CVE-2008-6078 : In Limbo CMS, the Private Messaging (com_privmsg) component’s open.php is vulnerable to SQL injection via the id parameter in a pms action to index.php. The NVD entry cites a base CVSSv2 score of 7.5 (HIGH) with network access, low attack complexity, and no authentication required...

7.5CVSS8.7AI score0.00967EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/02/06 11:00 a.m.•39 views

CVE-2008-6078

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

8.3AI score0.00967EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/06 12:00 a.m.•3 views

CVE-2008-6078: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in open.php in the Private Messaging comprivmsg component for Limbo CMS allows remote attackers to execute arbitrary SQL commands via the id parameter in a pms action to index.php...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2008/10/21 12:00 a.m.•22 views

Limbo CMS - Private Messaging Component SQL Injection

Limbo CMS - Private Messaging Component SQL Injection / Limbo CMS Private Messaging Component Remote SQL Injection Vulnerability -------------------------------------------------------------------------- StAkeRathotmaildotit http://www.limboportal.com/index.php/option/downloads/task/download/id/1...

1.1AI score
SaveExploits0
zdt
zdt
•added 2008/10/21 12:00 a.m.•25 views

Limbo CMS (Private Messaging Component) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Limbo CMS Private Messaging Component SQL Injection Vulnerability =================================================================== / Limbo CMS Private Messaging Compone...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/10/21 12:00 a.m.•28 views

Limbo CMS (Private Messaging Component) SQL Injection Vulnerability

No description provided by source. / Limbo CMS Private Messaging Component Remote SQL Injection Vulnerability -------------------------------------------------------------------------- StAkeRathotmaildotit http://www.limboportal.com/index.php/option/downloads/task/download/id/108...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/10/21 12:00 a.m.•51 views

Limbo CMS - Private Messaging Component SQL Injection

/ Limbo CMS Private Messaging Component Remote SQL Injection Vulnerability -------------------------------------------------------------------------- StAkeRathotmaildotit http://www.limboportal.com/index.php/option/downloads/task/download/id/108...

7.5CVSS5.8AI score0.00967EPSS
SaveExploits2
Packet Storm
Packet Storm
•added 2008/10/21 12:00 a.m.•27 views

limbocms-sql.txt

/ Limbo CMS Private Messaging Component Remote SQL Injection Vulnerability -------------------------------------------------------------------------- StAkeRathotmaildotit http://www.limboportal.com/index.php/option/downloads/task/download/id/108...

7.4AI score
SaveExploits0
NVD
NVD
•added 2008/02/13 1:00 a.m.•27 views

CVE-2008-0734

SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...

7.5CVSS8.4AI score0.01045EPSS
SaveExploits1References3
Prion
Prion
•added 2008/02/13 1:00 a.m.•25 views

Sql injection

SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...

7.5CVSS9.2AI score0.01045EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/13 12:00 a.m.•3 views

CVE-2008-0734: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...

7.5CVSS6.4AI score0.01045EPSS
SaveExploits1References2
CVE
CVE
•added 2008/02/13 12:00 a.m.•56 views

CVE-2008-0734

CVE-2008-0734 is an SQL injection in Limbo CMS (v1.0.4.2 and possibly earlier) affecting class_auth.php. The vulnerability allows remote attackers to inject arbitrary SQL through the cuid cookie parameter sent to admin.php, enabling data exposure or modification. Affected component is the authent...

7.5CVSS8.5AI score0.01045EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2008/02/13 12:00 a.m.•39 views

CVE-2008-0734

SQL injection vulnerability in classauth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the cuid cookie parameter to admin.php...

8.4AI score0.01045EPSS
SaveExploits1References3
Exploit DB
Exploit DB
•added 2008/02/09 12:00 a.m.•57 views

Limbo CMS 1.0.4.2 - 'Cuid' cookie Blind SQL Injection

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

7.5CVSS5.8AI score0.01045EPSS
SaveExploits1
zdt
zdt
•added 2008/02/09 12:00 a.m.•42 views

Limbo CMS <= 1.0.4.2 Cuid cookie Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Limbo CMS | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 08/02/2008 dd,mm,yyyy...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/02/09 12:00 a.m.•31 views

Limbo CMS 1.0.4.2 - Cuid cookie Blind SQL Injection

Limbo CMS 1.0.4.2 - Cuid cookie Blind SQL Injection !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...

0.6AI score
SaveExploits0
seebug.org
seebug.org
•added 2008/02/09 12:00 a.m.•32 views

Limbo CMS &lt;= 1.0.4.2 Cuid cookie Blind SQL Injection Exploit

No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...

7.1AI score
SaveExploits0
Rows per page
Query Builder