1341 matches found
Xoops 2.0.x Viewtopic.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9497/info It has been reported that Xoops may be prone to a cross-site scripting vulnerability that may allow a remote user to execute HTML or script code in a user's browser. HTML and script code may be parsed via the...
XOOPS Recette 2.2 - 'detail.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28859/info XOOPS Recette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
bcoos 1.0.10 (lfi / SQL Injection) Multiple Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: Bcoos Multiple Vulnerabilities Vendor: http://www.bcoos.net/ Bugs: Local File Inclusion, Sql Injection Vulnerable Version: bcoos 1.0.10 prior versions also may be affected...
XOOPS Tiny Event 1.01 - 'print' Option SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
E-Xoops 1.0.5/1.0.8 modules/arcade/index.php gid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
RunCMS 1.1 Database Configuration Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this vulnerability could lead to the...
Xoops 2.0.17 1 Mylinks Module Brokenlink.PHP SQL injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26392/info Xoops Mylinks module is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability could permit...
XOOPS 2.3.1 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Publ...
XOOPS Module WF-Snippets <= 1.02 (c) BLIND SQL Injection Exploit
No description provided by source. html head titleXOOPS Module WF-Snippets = 1.02 c BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module WF-Snippets = 1.02 c...
XOOPS 2.5.4 - Multiple XSS Vulnerabilities
No description provided by source...
XOOPS 'vacatures' Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27889/info XOOPS 'vacatures' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
E-Xoops 1.0.5/1.0.8 modules/banners/click.php bid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/26796/info E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Xoops 1.3.x/2.0 MyTextSanitizer HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7434/info A HTML injection vulnerability has been discovered in Xoops. The problem occurs due to insufficient filtering of HTML and script code by the MyTextSanitizer script. Successful exploitation of this vulnerability...
Nagl XOOPS Dictionary Module 1.0 - Multiple Cross-Site Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11064/info Reportedly the XOOPS Dictionary Module by Nagle is affected by multiple cross-site scripting vulnerabilities. This issue is due to a failure of the application to properly sanitize user-supplied URI input. As a...
Xoops 2.0.18 modules/system/admin.php fct Parameter Traversal Local File Inclusion
No description provided by source...
Content Module 0.5 for XOOPS 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37155/info The Content module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...
Xoops 2.5.4 - Blind SQL Injection
No description provided by source. ------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: Powered by XOOPS 2.5.4 Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom...
CVE-2014-3935
SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter...
Sql injection
SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter...
CVE-2014-3935
The CVE-2014-3935 entry covers an SQL injection in the Glossaire module (XOOPS) specifically in glossaire-aff.php, exploitable via the lettre parameter. The vulnerability affects Glossaire module 1.0 and allows remote execution of arbitrary SQL commands, with the issue classed as high severity (C...