XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2162

The CVE-2009-2162 entry affects XOOPS Maniac’s PukiWikiMod module (PukiWikiMod from XOOPS Maniac) for XOOPS, with the vulnerability present in version 1.6.6.2 and earlier. It is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script/HTML and execute it in a...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2162: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#12244807 Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac

PukiWikiMod from XOOPS Maniac is a contents management software for XOOPS. PukiWikiMod contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to latest version according to the information provided b...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis -...

XOOPS 2.3.3 - .htaccess Remote File Disclosure

XOOPS 2.3.3 - .htaccess Remote File Disclosure ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De...

XOOPS 2.3.3 - '.htaccess' Remote File Disclosure

======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis - daathatnibblesecdotorg Advisory...

XOOPS 2.3.3 File Disclosure

======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis - daathatnibblesecdotorg Advisory...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

Exploit for unknown platform in category web applications =============================================================== XOOPS = 2.3.3 Remote File Disclosure Vulnerability .htaccess ===============================================================...

XOOPS Cube Legacy cross-site scripting vulnerability

Overview XOOPS Cube Legacy from XOOPS Cube Project contains a cross-site scripting vulnerability. XOOPS Cube Legacy from XOOPS Cube Project is an open source contents management system. XOOPS Cube Legacy contains a cross-site scripting vulnerability. According to the developers, a XOOPS Cube Lega...

JVN#74747784 XOOPS Cube Legacy cross-site scripting vulnerability

XOOPS Cube Legacy from XOOPS Cube Project is an open source contents management system. XOOPS Cube Legacy contains a cross-site scripting vulnerability. According to the developers, a XOOPS Cube Legacy distribution "Hodajuku distribution" and "additional modules" are not affected by this...

E-Xoops 1.08 SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day SQL Injection E-Xoops = 1.08 By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day SQL Injection E-Xoops = 1.08 By Dante90 code http://www.victimesite.org/WaRWolFz/modules/mylinks/ratelink.php?lid=-1UNION SELECT CONCATname,CHAR32,58,32,pas...

CVE-2009-0805

Cross-site scripting XSS vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php...

CVE-2009-0805

Cross-site scripting XSS vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php...

CVE-2009-0805

CVE-2009-0805 describes a cross-site scripting (XSS) vulnerability in piCal 0.91h and earlier , a XOOPS calendar module. The flaw allows remote attackers to inject arbitrary web script or HTML via the event_id parameter in index.php. Impact is arbitrary script execution in affected users’ browser...

CVE-2009-0805: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in piCal 0.91h and earlier, a module for XOOPS, allows remote attackers to inject arbitrary web script or HTML via the eventid parameter in index.php...