XOOPS mydirname参数多个PHP代码注入漏洞

BUGTRAQ ID: 33176 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。...

XOOPS tadbook2 SQL Injection

XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/ live link:...

XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ XOOPS Module tadbook2 openbook.php booksn SQL Injection Vuln ================================================================ XOOPS Module: tadbook2 AUTHOR : Stylextra DORKS ...

XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln

No description provided by source. XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/...

XOOPS Module tadbook2 - SQL Injection

XOOPS Module tadbook2 - SQL Injection XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,...

XOOPS Module tadbook2 - SQL Injection

XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/ live link:...

XOOPS 2.3.2 (mydirname) Remote PHP Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution Directory...

XOOPS Multiple Scripts mydirname Parameter Arbitrary Command Injection

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'mydirname' parameter of the 'onupdate.php', 'notification.php', and 'oninstall.php' scripts under the application's 'xoopslib/modules/protector' directory before passing it to PHP 'eval' functions...

XOOPS 2.3.2 Code Execution Exploit

!/usr/bin/php -q 3 die"\n$num isn't a valid option\n"; else yeatshell; function yeatshell while 1 echo "yeatphp-shell$: "; $exec = stripslashestrimfgetsSTDIN; if preg...

XOOPS 2.3.2 (mydirname) Remote PHP Code Execution Exploit

Exploit for unknown platform in category web applications ========================================================= XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit ========================================================= !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code...

XOOPS 2.3.2 - mydirname PHP Remote Code Execution

XOOPS 2.3.2 - mydirname PHP Remote Code Execution !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution...

XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution

!/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution Directory xoopslib/modules/protector/...

tadbook2 Module for XOOPS - open_book.php SQL Injection

tadbook2 Module for XOOPS - openbook.php SQL Injection source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

tadbook2 Module for XOOPS - 'open_book.php' SQL Injection

source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

CVE-2008-5768

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5768

The CVE-2008-5768 entry is an actionable SQL injection in the AM Events module (Amevents) for XOOPS version 0.22, exploitable through print.php via the id parameter. The underlying issue is a direct SQL command construction vulnerability that allows remote attackers to execute arbitrary SQL comma...

CVE-2008-5768

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5768: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

XOOPS xoopsConfig[language] Parameter Local File Inclusion (DSECRG-08-040)

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'xoopsConfiglanguage' parameter before passing it to a PHP 'includeonce' function in 'xoopslib/modules/protector/main.php'. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker...