Sql injection

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

CVE-2009-4698

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

CVE-2009-4713

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

CVE-2009-4714

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

CVE-2009-4714

CVE-2009-4714 affects the XOOPS Celepar quiz module. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to cadastro_usuario.php. The available connected sources corroborate an XSS impact, but no explicit remedia...

CVE-2009-4713

CVE-2009-4713 affects the XOOPS Celepar Qas (Quas) module. It has multiple XSS vulnerabilities in categoria.php (cod_categoria), index.php (opcao), and via PATH_INFO to categoria.php and index.php, enabling remote script/HTML injection. The NVD entry lists a base score of 4.3 (Medium) with AV:N/A...

CVE-2009-4698

CVE-2009-4698 affects the Xoops Celepar Qas/Quas module for XOOPS Celepar. The NVD/OpenVAS entries describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the parameters: codigo in aviso.php and imprimir.php, and cod_categoria in categoria...

CVE-2009-4714: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

CVE-2009-4713: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

CVE-2009-4698: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

Multiple Stored XSS in XOOPS 2.4.4 Admin Section

Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S, lowlz,Eberly,Sumit, Author: Beenu Arora Home : www.BeenuArora.com Email : [email protected] Share the c0de! Exploit: Multiple Stored XSS in XOOPS 2.4.4 Admin Section AppSite:...

XOOPS任意文件删除和HTTP头注入漏洞

No description provided by source...

XOOPS Arbitrary File Deletion and HTTP Header Injection Vulnerabilities

XOOPS is prone to an HTTP-header-injection vulnerability and an arbitrary-file- deletion vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Multiple Vulnerabilities in XOOPS 2.4.3 and earlier

======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Multiple vulnerablities in Xoops 2.4.3 = = Vendor Website: = http://www.xoops.org = = Affected Version: = Xoops 2.4.3 And Earlier = = Researched By = CodeScan Lab...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4582

The supplied documents confirm a concrete vulnerability: XOOPS 2.0.18, within the Dictionary module, is affected by an SQL injection in detail.php. The issue arises from the id parameter, which allows remote attackers to execute arbitrary SQL commands. This is a database command injection affecti...

XOOPS modules/pm/readpmsg.php页面跨站脚本漏洞

BUGTRAQ ID: 37594 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。 Xoops没有正确地过滤提交给modules/pm/readpmsg.php页面的op参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。成功攻击要求安装了Private Messaging模块。 Xoops 2.x 厂商补丁： Xoops ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

XOOPS include/notification_update.php页面SQL注入漏洞

BUGTRAQ ID: 37597 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。 Xoops没有正确地过滤通过第三方模块（如News）向include/notificationupdate.php页面所提交的notlist参数便在SQL查询中使用，远程攻击者可以通过提交恶意请求执行SQL注入攻击。 Xoops 2.x 厂商补丁： Xoops ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.xoops.org/modules/news/print.php?storyid=5178...