CVE-2008-6884

CVE-2008-6884 describes multiple directory traversal vulnerabilities in XOOPS 2.3.1 where remote attackers can cause local file inclusion/execution by manipulating the xoopsConfig[language] parameter. The issue affects blocks.php and main.php inside xoops_lib/modules/protector/ and is tied to reg...

XOOPS Celepar Module Qas (bSQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== XOOPS Celepar Module Qas bSQL/XSS Multiple Remote Vulnerabilities ===================================================================...

Xoops Celepar Module Qas (codigo) SQL Injection Vulnerability

No description provided by source. Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo =...

XOOPS Celepar Module Qas - Blind SQL Injection Cross-Site Scripting

XOOPS Celepar Module Qas - Blind SQL Injection Cross-Site Scripting -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NA...

Xoops Celepar Quiz Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Xoops Celepar Qas Blind SQL Injection / XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Xoops Celepar Qas SQL Injection

Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo = $POST'codigo'; else $codigo =...

Xoops Celepar Module Qas (codigo) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Xoops Celepar Module Qas codigo SQL Injection Vulnerability ============================================================= Xoops Celepar Module Qas Donwload of Xoops Celepar :...

XOOPS Celepar Module Qas - codigo SQL Injection

XOOPS Celepar Module Qas - codigo SQL Injection Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code:...

XOOPS Celepar Module Qas - 'codigo' SQL Injection

Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo = $POST'codigo'; else $codigo =...

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Cross site scripting

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2162

The CVE-2009-2162 entry affects XOOPS Maniac’s PukiWikiMod module (PukiWikiMod from XOOPS Maniac) for XOOPS, with the vulnerability present in version 1.6.6.2 and earlier. It is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script/HTML and execute it in a...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#12244807 Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac

PukiWikiMod from XOOPS Maniac is a contents management software for XOOPS. PukiWikiMod contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to latest version according to the information provided b...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis -...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

Exploit for unknown platform in category web applications =============================================================== XOOPS = 2.3.3 Remote File Disclosure Vulnerability .htaccess ===============================================================...

XOOPS 2.3.3 File Disclosure

======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis - daathatnibblesecdotorg Advisory...