PEAK XOOPS piCal cross-site scripting vulnerability

Overview piCal from PEAK XOOPS contains a cross-site scripting vulnerability. piCal from PEAK XOOPS is a calendar module with a scheduler for XOOPS. piCal contains a cross-site scripting vulnerability. Masako Oono of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with...

JVN#91591874 PEAK XOOPS piCal cross-site scripting vulnerability

piCal from PEAK XOOPS is a calendar module with a scheduler for XOOPS. piCal contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...

XOOPS tadbook2 SQL Injection

XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/ live link:...

XOOPS mydirname参数多个PHP代码注入漏洞

BUGTRAQ ID: 33176 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。...

XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln

No description provided by source. XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/...

XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ XOOPS Module tadbook2 openbook.php booksn SQL Injection Vuln ================================================================ XOOPS Module: tadbook2 AUTHOR : Stylextra DORKS ...

XOOPS Module tadbook2 - SQL Injection

XOOPS Module tadbook2 - SQL Injection XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,...

XOOPS Module tadbook2 - SQL Injection

XOOPS Module: tadbook2 AUTHOR : Stylextra HOME : http://www.zamet.org MAIL : [email protected] DORKS : dork: /modules/tadbook2/openbook.php?booksn= target: scriptpage.com/modules/tadbook2/openbook.php?booksn=sql Code Sql code: -99//union//select//version,2/ live link:...

XOOPS Multiple Scripts mydirname Parameter Arbitrary Command Injection

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'mydirname' parameter of the 'onupdate.php', 'notification.php', and 'oninstall.php' scripts under the application's 'xoopslib/modules/protector' directory before passing it to PHP 'eval' functions...

XOOPS 2.3.2 (mydirname) Remote PHP Code Execution Exploit

No description provided by source. !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution Directory...

XOOPS 2.3.2 - mydirname PHP Remote Code Execution

XOOPS 2.3.2 - mydirname PHP Remote Code Execution !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution...

XOOPS 2.3.2 - 'mydirname' PHP Remote Code Execution

!/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit by athos - stakerathotmaildotit http://xoops.org thanks to s3rg3770 and The:Paradox works with register globals on note: this vuln is a remote php code execution Directory xoopslib/modules/protector/...

XOOPS 2.3.2 (mydirname) Remote PHP Code Execution Exploit

Exploit for unknown platform in category web applications ========================================================= XOOPS 2.3.2 mydirname Remote PHP Code Execution Exploit ========================================================= !/usr/bin/php -q ?php / XOOPS 2.3.2 mydirname Remote PHP Code...

XOOPS 2.3.2 Code Execution Exploit

!/usr/bin/php -q 3 die"\n$num isn't a valid option\n"; else yeatshell; function yeatshell while 1 echo "yeatphp-shell$: "; $exec = stripslashestrimfgetsSTDIN; if preg...

tadbook2 Module for XOOPS - 'open_book.php' SQL Injection

source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

tadbook2 Module for XOOPS - open_book.php SQL Injection

tadbook2 Module for XOOPS - openbook.php SQL Injection source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

CVE-2008-5768

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5768

The CVE-2008-5768 entry is an actionable SQL injection in the AM Events module (Amevents) for XOOPS version 0.22, exploitable through print.php via the id parameter. The underlying issue is a direct SQL command construction vulnerability that allows remote attackers to execute arbitrary SQL comma...

CVE-2008-5768

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...