Xoops Celepar <= 2.2.4 Multiple Vulnerabilities - Active Check

Xoops Celepar is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2009-4713

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

CVE-2009-4714

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

CVE-2009-4698

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

Sql injection

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

CVE-2009-4713

CVE-2009-4713 affects the XOOPS Celepar Qas (Quas) module. It has multiple XSS vulnerabilities in categoria.php (cod_categoria), index.php (opcao), and via PATH_INFO to categoria.php and index.php, enabling remote script/HTML injection. The NVD entry lists a base score of 4.3 (Medium) with AV:N/A...

CVE-2009-4713

Multiple cross-site scripting XSS vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to inject arbitrary web script or HTML via 1 the codcategoria parameter to categoria.php, 2 the opcao parameter to index.php, and the PATHINFO to 3 categoria.php and 4 index.php...

CVE-2009-4698

Multiple SQL injection vulnerabilities in the Qas aka Quas module for XOOPS Celepar allow remote attackers to execute arbitrary SQL commands via the codigo parameter to 1 aviso.php and 2 imprimir.php, and the 3 codcategoria parameter to categoria.php...

CVE-2009-4714

CVE-2009-4714 affects the XOOPS Celepar quiz module. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to cadastro_usuario.php. The available connected sources corroborate an XSS impact, but no explicit remedia...

CVE-2009-4698

CVE-2009-4698 affects the Xoops Celepar Qas/Quas module for XOOPS Celepar. The NVD/OpenVAS entries describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the parameters: codigo in aviso.php and imprimir.php, and cod_categoria in categoria...

CVE-2009-4714

Cross-site scripting XSS vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to cadastrousuario.php...

Multiple Stored XSS in XOOPS 2.4.4 Admin Section

Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S, lowlz,Eberly,Sumit, Author: Beenu Arora Home : www.BeenuArora.com Email : [email protected] Share the c0de! Exploit: Multiple Stored XSS in XOOPS 2.4.4 Admin Section AppSite:...

XOOPS任意文件删除和HTTP头注入漏洞

No description provided by source...

XOOPS Arbitrary File Deletion and HTTP Header Injection Vulnerabilities

XOOPS is prone to an HTTP-header-injection vulnerability and an arbitrary-file- deletion vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Multiple Vulnerabilities in XOOPS 2.4.3 and earlier

======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Multiple vulnerablities in Xoops 2.4.3 = = Vendor Website: = http://www.xoops.org = = Affected Version: = Xoops 2.4.3 And Earlier = = Researched By = CodeScan Lab...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...