CVE-2008-1065

CVE-2008-1065 affects the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS. The vulnerability is a SQL injection in index.php caused by unsafely handled input in the (1) letter and (2) sortby parameters, enabling remote attackers to craft SQL commands. The reports do not provide explicit expl...

CVE-2008-1064

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1065: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1064: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1063: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

Sql injection

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0936

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

Sql injection

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0936

CVE-2008-0936 affects the XOOPS Prayer List (prayerlist) 1.04 module: an SQL injection vulnerability in index.php allows an attacker to manipulate the cid parameter in a view action to execute arbitrary SQL. The vulnerability impacts remote confidentiality and integrity (per the reported CVSS 2.0...

CVE-2008-0936

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0937

The CVE-2008-0937 entry describes a SQL injection vulnerability in the Tiny Event (tinyevent) 1.01 module for XOOPS. An attacker can manipulate the id parameter in a print action to execute arbitrary SQL commands. The connected documents corroborate the vulnerability, including references to rela...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0937: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0936: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

xoopsprayerlist-sql.txt

XOOPS Module prayerlist SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules/prayerlist/index.php?pa"cid DORK 2 : allinurl: EXPLOIT :...

xoopstiny-sql.txt

XOOPS Module tinyevent-print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules/tinyevent" DORK 2 : exploit working all tinyevent EXPLOIT :...

XOOPS Module tinyevent-print SQL Injection(id)

XOOPS Module tinyevent-print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules/tinyevent" DORK 2 : exploit working all tinyevent EXPLOIT :...

XOOPS Module prayerlist SQL Injection(cid)

XOOPS Module prayerlist SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules/prayerlist/index.php?pa"cid DORK 2 : allinurl: EXPLOIT :...

Xoops-2.0.16 Remote File Inclusion

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...