CVE-2008-5768: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in the AM Events aka Amevents module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

XOOPS xoopsConfig[language] Parameter Local File Inclusion (DSECRG-08-040)

The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'xoopsConfiglanguage' parameter before passing it to a PHP 'includeonce' function in 'xoopslib/modules/protector/main.php'. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker...

CVE-2008-5665

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter...

Sql injection

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter...

CVE-2008-5665

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter...

CVE-2008-5665

CVE-2008-5665: A SQL injection vulnerability exists in the XOOPS xhresim module, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the no parameter. The connected documents confirm the affected component (xhresim module, index.php) and the vulnerability cl...

CVE-2008-5665: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no parameter...

XOOPS Amevents Module SQL Injection

XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAİL : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code: -98//union//select//1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16//from//xoopsuser...

XOOPS Module Amevents - SQL Injection

XOOPS Module Amevents - SQL Injection XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAÄ°L : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code:...

XOOPS Module Amevents (print.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ XOOPS Module Amevents print.php id SQL Injection Vulnerability ================================================================ XOOPS Module: Amevents AUTHOR : netRoot DORKS ...

XOOPS Module Amevents - SQL Injection

XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAÄ°L : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code:...

XOOPS Module Amevents (print.php id) SQL Injection Vulnerability

No description provided by source. XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAÄ°L : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code:...

[DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x

Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors:...

[DSECRG-08-041] Stored XSS Vulnerability in Xoops 2.3.x

Digital Security Research Group DSecRG Advisory DSECRG-08-041 Application: XOOPS Versions Affected: 2.3.1, 2.3.2a Vendor URL: http://www.xoops.org/ Bug: Stored XSS Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors: Digital...

[DSECRG-08-040] Multiple Local File Include Vulnerabilities in Xoops 2.3.x

Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors:...

XOOPS 2.3.1 Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors:...

XOOPS 2.3.1 Multiple Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Publ...

XOOPS 2.3.1/2.3.2a Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-08-041 Application: XOOPS Versions Affected: 2.3.1, 2.3.2a Vendor URL: http://www.xoops.org/ Bug: Stored XSS Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Date of Public Advisory: 08.12.2008 Authors: Digital...

XOOPS 2.3.1 - Multiple Local File Inclusions

XOOPS 2.3.1 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-040 Application: XOOPS Versions Affected: 2.3.1 Vendor URL: http://www.xoops.org/ Bug: Multiple Local File Include Exploits: YES Reported: 10.11.2008 Vendor response: 10.11.2008 Solution: YES Da...

XOOPS 2.3.1 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= XOOPS 2.3.1 Multiple Local File Inclusion Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-040...