CVE-2009-4359

Cross-site scripting XSS vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the categoryid parameter...

CVE-2009-4359: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in folder.php in the SmartMedia 0.85 Beta module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the categoryid parameter...

CVE-2009-4360: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/content/index.php in the Content module 0.5 for XOOPS allows remote attackers to inject arbitrary web script or HTML via the id parameter...

XOOPS Smart Media 0.85 Cross Site Scripting

Exploit Title: XOOPS Module Smartmedia XSS Version : SmartMedia 0.85 Date: 2009-11-30 Discovred By : SoldierOfAllah Software Link: http://dev.xoops.org/dl/smartmedia/5 - Beta and RC Releases/SmartMedia 0.85 Beta/XOOPS2modsmartmedia0.85BETAsmartfactory.zip CVE-ID: / Software Information + Xoops...

XOOPS 2.0.x Content 0.5 SQL Injection

+Xoops 2.0.x Module Content +Donwload of Module:http://prdownloads.sourceforge.net/xoops/XOOPS2modcontent-0.5.zip?download +Author: s4r4d0 +mail:[email protected] +TEAM: Fatal Error +Bug: Sql injection has been found in index.php...

XOOPS SmartMedia 0.85 Module XSS

No description provided by source. Exploit Title: XOOPS Module Smartmedia XSS Version : SmartMedia 0.85 Date: 2009-11-30 Discovred By : SoldierOfAllah Software Link: http://dev.xoops.org/dl/smartmedia/5 - Beta and RC Releases/SmartMedia 0.85 Beta/XOOPS2modsmartmedia0.85BETAsmartfactory.zip CVE-ID...

SmartMedia Module 0.85 Beta for XOOPS - 'categoryId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37156/info The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspectin...

Content Module 0.5 for XOOPS - id SQL Injection

Content Module 0.5 for XOOPS - id SQL Injection source: https://www.securityfocus.com/bid/37155/info The Content module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

SmartMedia Module 0.85 Beta for XOOPS - categoryId Cross-Site Scripting

SmartMedia Module 0.85 Beta for XOOPS - categoryId Cross-Site Scripting source: https://www.securityfocus.com/bid/37156/info The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

Content Module 0.5 for XOOPS - 'id' SQL Injection

source: https://www.securityfocus.com/bid/37155/info The Content module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

XOOPS Multiple Unspecified Vulnerabilities (Nov 2009)

XOOPS is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescripti...

XOOPS Version Detection

This script detects the installed XOOPS version. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors...

CVE-2009-3963

Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors...

CVE-2009-3963

XOOPS (before version 2.4.0 Final) is cited in connected sources as having a cross-site scripting vulnerability in misc.php: the script does not sanitize the requested URI before displaying it, enabling a remote attacker to craft a URL that executes script in victims’ browsers. CVE-2009-3963 is t...

CVE-2009-3963

Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors...

Xoops用户配置文件激活安全绕过漏洞

Bugraq ID: 37028 XOOPS是一款开放源代码的内容管理程序。 XOOPS不正确校验激活类型权限，通过请求应用程序重新发送激活Email可绕过管理员批准就可以激活新用户使用。 Xoops Xoops 2.4 Xoops Xoops 2.3.3 Xoops Xoops 2.3.2 b Xoops Xoops 2.3.2 Xoops Xoops 2.2.5 Xoops Xoops 2.2.3 RC1 Xoops Xoops 2.2.3 Xoops Xoops 2.2.1 Xoops Xoops 2.0.18 1 Xoops Xoops 2.0.18 Xoops Xoops...

CVE-2009-3963: Undefined Security Weakness

Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors...

XOOPS misc.php Query String XSS

The version of XOOPS running on the remote web server has a cross- site scripting vulnerability. 'misc.php' does not sanitize the requested URI before displaying it in the response. Manipulating the query string can result in a cross-site scripting attack. A remote attacker could exploit this by...

XOOPS 2.2.6. local include vulnerability-vulnerability warning-the black bar safety net

Author: Oldjun Casual encounter with this foreign CMS system: XOOPS 2.2.6, google the next, version old, and didn't find any known vulnerability, so the following source code yourself to see, still haven't found what you can use, but saw a couple of tasteless, so. XOOPS is a web application...