XOOPS 2.5.0 Cross Site Scripting

XOOPS 2.5.0 = Cross Site Scripting Vulnerability 1. OVERVIEW The XOOPS 2.5.0 and lower versions were vulnerable to Cross Site Scripting. 2. BACKGROUND XOOPS is an acronym of eXtensible Object Oriented Portal System. It's the 1 Content Management System CMS project on www.sourceforge.net and a...

E-Xoopport 3.1 SQL Injection

= 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":80 Trying again..."; $sock = fsockopen$host,80;...

XOOPS 2.0.14 SQL Injection

/ \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By 0iZy5 http://r00tDefaced.com &...

XOOPS 2.0.14 - article.php SQL Injection

XOOPS 2.0.14 - article.php SQL Injection / \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By...

XOOPS 2.0.14 - 'article.php' SQL Injection

/ \ / | | | \ / | | | | | | | | | | || | | | | | | | | '| | | | | | | | | | |/ \ / |/ / / | | | | || | || | || || | / || | | | / | | || / / |/ || ,|\|,| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ XOOPS 2.0.14 article.php SQL Injection Vulnerability Discovered By 0iZy5 http://r00tDefaced.com &...

Joomla / XOOPS Zina SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

xoops tad_uploader module upload vulnerability-vulnerability warning-the black bar safety net

Xoops is a very popular dynamic web content management system, with object-oriented PHP to write. xoops taduploader module catsn parameter space can be arbitrarily upload files to the uploads/taduploader/directory. Test code: FORM action='http://www.hackqing.cn/modules/taduploader/index.php'...

xoops tad_uploader模块上传漏洞

Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。 xoops taduploader模块catsn参数为空格时可以任意上传文件至uploads/taduploader/目录。 Xoops 2.4.3 厂商补丁： Xoops ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://xoops.sourceforge.net/ FORM action='http://URL/modules/taduploader/index.php' method='POST'...

XOOPS Profiles Module Activation Security Bypass Vulnerability

XOOPS is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescription...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

Authentication flaw

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2009-4851

XOOPS Profiles Module vulnerability (pre-2.4.1) allows remote attackers to bypass administrative approval via activation resend: activation codes are sent in response to arbitrary activation requests (activate.php). Affects XOOPS Profiles Module; root cause is improper handling of activation requ...

CVE-2009-4851: Undefined Security Weakness

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

Xoops Celepar <= 2.2.4 Multiple Vulnerabilities - Active Check

Xoops Celepar is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Xoops Celepar Detection (HTTP)

HTTP based detection of Xoops Celepar. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801152";...

Xoops Celepar Multiple Vulnerabilities

This host is running Xoops Celepar and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbxoopsceleparmultvuln.nasl 7144 2017-09-15 12:14:43Z cfischer $ Xoops Celepar Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2009-4713

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

CVE-2009-4714

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...