WordPress cformsII plugin rs and rsargs parameters to a script injection vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Nicole Stich cformsII 11.5 Vulnerability description: WordPress is a Free Forum Blog system. WordPress using cformsII plugin does not properly filter user submitted to the wp-content/plugins/cforms /libajax. php page of the rs and rsargs parameters will be displayed to the user...

CVE-2010-3977: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wp-content/plugins/cforms/libajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the 1 rs and 2 rsargs parameters...

Cforms <= 13.1 - 'lib_ajax.php' Cross-Site Scripting (XSS)

The cforms plugin has a XSS vulnerability in file libajax.php with rs and rsargs parameters. It is fixed in version 13.2. The cforms2 fork was forked at 14.6, so it is not affected...

Joomla! Component com_qcontacts - SQL Injection

Exploit Title: Joomla Component QContacts comqcontacts - SQL Injection Vulnerability Date: 12, July 2010 Author: mlk Software Link: http://bugsec.googlecode.com/files/Joomlacomqcontacts.zip Version: 1.0.4 and previous Tested on: all OS CVE : 0 Code : here Joomla Component QContacts comqcontacts -...

Joomla ChronoForms Blind SQL Injection

Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability ! Discovered by : mlk Renan ! Teams : c00kies ,...

Authentication flaw

userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-7081

userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2009-2209

SQL injection vulnerability in rscmsmodnewsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2009-2209

SQL injection vulnerability in rscmsmodnewsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter...

Sql injection

SQL injection vulnerability in rscmsmodnewsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2009-2209

CVE-2009-2209 affects RS-CMS 2.1, with the vulnerability located in the file rscms_mod_newsview.php. The issue is an SQL injection via the key parameter, enabling remote attackers to execute arbitrary SQL commands. This vulnerability is classified as high severity (CVSS v2 base score 7.5) with ne...

CVE-2009-2209: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rscmsmodnewsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter...

RS-CMS 2.1 SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :RS-CMS 2.1 rscmsmodnewsview.php key Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + C0ntact :...

RS-CMS 2.1 (key) Remote SQL Injection Vulnerability

No description provided by source. ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :RS-CMS 2.1 rscmsmodnewsview.php key Remote SQL Injection Vulnerability + Found by :...

RS-CMS 2.1 (key) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== RS-CMS 2.1 key Remote SQL Injection Vulnerability =================================================== ======================================================= +++++++++++++++++++ informati...

RS-CMS 2.1 - key SQL Injection

RS-CMS 2.1 - key SQL Injection ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :RS-CMS 2.1 rscmsmodnewsview.php key Remote SQL Injection Vulnerability + Found by :...

RS-CMS 2.1 - 'key' SQL Injection

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :RS-CMS 2.1 rscmsmodnewsview.php key Remote SQL Injection Vulnerability + Found by : Mr.tro0oqy + C0ntact :...

CVE-2008-4912

SQL injection vulnerability in popupimg.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...

CVE-2008-4912

The CVE-2008-4912 entry describes an SQL injection in the RS MAXSOFT fotogalerie module, specifically in popup_img.php where the vulnerable input is the fotoID parameter . The underlying issue allows remote attackers to execute arbitrary SQL commands via that parameter. Affected component is the ...

CVE-2008-4912

SQL injection vulnerability in popupimg.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect...