ClanTiger Shoutbox Module s_email SQL Injection vulnerability

MOPS-2010-007: ClanTiger Shoutbox Module semail SQL Injection vulnerability May 4th, 2010 A SQL injection vulnerability was discovered in the shoutbox module of ClanTiger that allows retrieving all the data from the database. Affected versions Affected is ClanTiger = 1.1.3 Credits The vulnerabili...

CVE-2010-1863

SQL injection vulnerability in the shoutbox module modules/shoutbox.php in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the semail parameter...

Sql injection

SQL injection vulnerability in the shoutbox module modules/shoutbox.php in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the semail parameter...

CVE-2010-1863

SQL injection vulnerability in the shoutbox module modules/shoutbox.php in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the semail parameter...

CVE-2010-1863

CVE-2010-1863 describes an SQL injection in the ClanTiger shoutbox module (modules/shoutbox.php) affecting ClanTiger 1.1.3 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands through the s_email parameter, exposing confidentiality and integrity of the database...

Directory traversal

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1534

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1534

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2009-4767

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4767

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4767

Technical details, affected versions, exploit steps, and remediation are not provided in the connected documents; monitor for updates.

Joomla Component com_shoutbox LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk...

Joomla Shoutbox Local File Inclusion

================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Bl...

Joomla! Component Shoutbox Pro - Local File Inclusion

Joomla! Component Shoutbox Pro - Local File Inclusion ================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia...

Joomla! Component Shoutbox Pro - Local File Inclusion

================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Bl...

Authentication flaw

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-4232

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-4232

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-4232

The CVE-2009-4232 entry concerns the Kide Shoutbox (com_kide) Joomla! extension version 0.4.6. The vulnerability is an authentication flaw that allows remote attackers to post messages under an arbitrary account name by abusing the insertar action in index.php. The issue is documented across mult...