360 matches found
CVE-2013-1804
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the 1 highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the...
Joomla! AJAX Shoutbox Component "jal_lastID" SQL注入漏洞
Joomla!是一款内容管理系统。 由于通过"jallastID"参数传递到index.php的输入 当"mode"设置为"getshouts"在用于SQL注入前未能正确过滤，攻击者可以利用漏洞通过注入SQL代码操纵SQL查询。 0 AJAX Shoutbox 1.6 component for Joomla! AJAX Shoutbox 1.7版本以修复此漏洞，建议用户下载使用： http://extensions.joomla.org/extensions/communication/shoutbox/43 + Details: - include "helper.php"; -...
Joomla AJAX Shoutbox <= 1.6 - Remote SQL Injection Vulnerability
Exploit for php platform in category web applications + Details: - include "helper.php"; - parameter: jallastID - Code: 113 $jallastID = JRequest::getVar 'jallastID', 0 ; 114 115 $query = 'SELECT FROM shoutbox WHERE id '.$jallastID.' ORDER BY id DESC'; - Exploit:...
Joomla! Component AJAX Shoutbox 1.6 - SQL Injection
Joomla! Component AJAX Shoutbox 1.6 - SQL Injection Joomla AJAX Shoutbox remote SQL Injection vulnerability - Author: Ibrahim Raafat - Contact: https://twitter.com/RaafatSEC - Discovery date: 1 April 2010 4 years ago - Reported to vendor : 12 March 2014 - Response: Quick response from the...
Joomla! Component AJAX Shoutbox 1.6 - SQL Injection
Joomla AJAX Shoutbox remote SQL Injection vulnerability - Author: Ibrahim Raafat - Contact: https://twitter.com/RaafatSEC - Discovery date: 1 April 2010 4 years ago - Reported to vendor : 12 March 2014 - Response: Quick response from the developer, Patched and released version 1.7 in the same day...
Joomla AJAX Shoutbox SQL Injection
Joomla AJAX Shoutbox Remote SQL Injection vulnerability - Author: Ibrahim Raafat - Contact: https://twitter.com/RaafatSEC - Discovery date: 1 April 2010 4 years ago - Reported to vendor : 12 March 2014 - Response: Quick response from the developer, Patched and released version 1.7 in the same day...
JJ Shoutbox, 1.2.6,
JJ Shoutbox, 1.2.6, Other Developer statement This security issue was for version 1.2.6 of JJ Shoutbox. We fixed this issue last night and released version 1.3.0 http://joomjunk.co.uk/products/module-home/shoutbox.htmlchangelog...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2010-4951
Cross-site scripting XSS vulnerability in the xaJax Shoutbox vxxajaxshoutbox extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4951
The CVE-2010-4951 issue affects the TYPO3 ecosystem via the xaJax Shoutbox (vx_xajax_shoutbox) extension prior to 1.0.1. According to the provided sources, this is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through unspecified ve...
CVE-2010-4951: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the xaJax Shoutbox vxxajaxshoutbox extension before 1.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2011-1886
Name of the Vulnerable Software and Affected Versions TYPO3 extension vx xajax shoutbox version 1.0.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For version 1.0.0, update to version 1.0.1 or later to resol...
phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
No description provided by source. Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts to get the vendor to fix this flaw, he has told me to...
phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability
View here: https://www.stevenroddis.com/phpbb-ajax-chatshoutbox-mod-csrf-vulnerability/ Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts ...
Damianov.net Shoutbox 1.0 Cross Site Scripting
Exploit Title: damianov.net Shoutbox XSS Vulnerability Date: 13.05.2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: Debian, Apache2, PHP5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...
damianov.net Shoutbox - Cross-Site Scripting
damianov.net Shoutbox - Cross-Site Scripting Exploit Title: damianov.net Shoutbox XSS Vulnerability Date: 13.05.2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: Debian, Apache2, PHP5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::...
damianov.net Shoutbox - Cross-Site Scripting
Exploit Title: damianov.net Shoutbox XSS Vulnerability Date: 13.05.2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: Debian, Apache2, PHP5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...
ClanTiger Shoutbox Module s_email SQL Injection vulnerability
MOPS-2010-007: ClanTiger Shoutbox Module semail SQL Injection vulnerability May 4th, 2010 A SQL injection vulnerability was discovered in the shoutbox module of ClanTiger that allows retrieving all the data from the database. Affected versions Affected is ClanTiger = 1.1.3 Credits The vulnerabili...