1341 matches found
XOOPS Module resmanager <= 1.21 - Blind SQL Injection Exploit
No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...
E-Xoops 1.0.5/1.0.8 mydownloads/ratefile.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
xoops celepar module qas (bsql/xss) Multiple Vulnerabilities
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
WF-Quote 1.0 Xoops Module Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23845/info The WF-Quote module for the Xoops CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...
XOOPS 'events' Module - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27890/info The XOOPS 'events' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...
E-Xoops 1.0.5/1.0.8 mysections/ratefile.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
XOOPS 2.3.3 \\\'op\\\' Parameter Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browse...
Xoops <= 2.2.3 Search.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20514/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
DevTracker Module For bcoos 1.1.11 and E-xoops 1.0.8 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27619/info DevTracker module for bcoos and E-xoops is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
MAXdev My eGallery Module 3.04 - For Xoops 'gid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28220/info MAXdev My eGallery module for Xoops is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
xoops module tsdisplay4xoops 0.1 - Remote File Inclusion Vulnerability
No description provided by source. tsdisplay4xoops 0.1xoopsurlRemote File Include Vulnerabilitiy D.Script: http://kisskool30.free.fr/tsdisplay4xoopsv0.08.zip Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc...
XOOPS Module Dictionary <= 0.94 Remote SQL Injection Vulnerability
No description provided by source...
XOOPS 2.2.5 register.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26835/info XOOPS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
xoops module tinycontent 1.5 - Remote File Inclusion Vulnerability
No description provided by source. XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...
XOOPS Module RM+Soft Gallery 1.0 - Blind SQL Injection Exploit
No description provided by source. html head titleXOOPS Module RM+Soft Gallery 1.0categos.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module RM+Soft Galle...
XOOPS 2.0 XoopsOption Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7149/info XOOPS has been reported vulnerable to an information disclosure vulnerability. According to the report, path information and other sensitive data may be output in server error messages. Information obtained in...
XOOPS 'seminars' Module - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27891/info The XOOPS 'seminars' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...
E-Xoops 1.0.5/1.0.8 mylinks/ratelink.php lid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
XOOPS Flashgames Module 1.0.1 - Remote SQL Injection Vulnerability
No description provided by source...
XOOPS 2.0.14 Article Module - 'article.php' SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '84999' ssvid version = '1.0' author = 'kikay' vulDate = '2008-05-06' createDate ...