CVE-2007-5598

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5598

CVE-2007-5598 affects the Weblinks module for Drupal, specifically versions 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents c...

CVE-2007-5598: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-2007-028 - Weblinks - Cross site scripting

User input is not properly sanitized on a number of pages. This allows malicious users to inject arbitrary HTML and script code into these pages, which may lead to administrator access if certain conditions are met. Learn more about cross site scripting on Wikipedia. Versions affected Weblinks fo...

Sql injection bugs in Xoops 2.0.16 + Weblinks module

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE-2007-0377. There is a sql injection bug in Xoops 2.0.16 core and maybe other versions in admin section: The 'id' parameter in "get" function is not checked against sql injections : File kernel/group.php, Line 94 : :: function...

Sql injection

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...

CVE-2007-0387

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0377

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...

CVE-2007-0377

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...

CVE-2007-0387

The CVE-2007-0387 issue affects the Joomla! Weblinks (com_weblinks) component, specifically in models/category.php where the catid parameter is used in SQL queries. This is a SQL injection vulnerability that could allow remote attackers to inject arbitrary SQL commands. The vulnerability is assoc...

CVE-2007-0387

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...

CVE-2007-0377: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...

mxBB Module WebLinks <= 2.05 Remote Inclusion Vulnerability

No description provided by source. Title : mxBB Module WebLinks = 2.05mxrootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com Dork : /modules/mxlinks/ ERROR------------------------------------------------------ .... .. includeonce $mxrootpath...

mxBB Module WebLinks <= 2.05 Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== mxBB Module WebLinks = 2.05 Remote Inclusion Vulnerability =========================================================== Title : mxBB Module WebLinks = 2.05mxrootpath Remote File...

mxBB Module WebLinks 2.05 - Remote File Inclusion

mxBB Module WebLinks 2.05 - Remote File Inclusion Title : mxBB Module WebLinks = 2.05mxrootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com Dork : /modules/mxlinks/ ERROR------------------------------------------------------ .... .. includeonce...

mxBB Module WebLinks &lt;= 2.05&#40;mx_root_path&#41; Remote File Include Vulnerability

Title : mxBB Module WebLinks = 2.05mxrootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com Dork : /modules/mxlinks/ ERROR------------------------------------------------------ .... .. includeonce $mxrootpath...

mxBB Module WebLinks 2.05 - Remote File Inclusion

Title : mxBB Module WebLinks = 2.05mxrootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com Dork : /modules/mxlinks/ ERROR------------------------------------------------------ .... .. includeonce $mxrootpath...

CVE-2006-4969

Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the IncDir parameter in 1 affiliates.php, 2 orders.php, 3 events.php, 4 index.php, 5 articles.php, 6 faqs.php, 7 guestbook.php, 8 catalog.php, 9...