1341 matches found
XOOPS Module xhresim - SQL Injection
XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code= 9999+union+select+0,concatuname,0x3a,pass,2,3+from+xoopsusers-- live li...
CVE-2008-4433
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...
CVE-2008-4432
Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...
CVE-2008-4435
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Sql injection
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...
CVE-2008-4432
Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...
CVE-2008-4433
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...
CVE-2008-4432
CVE-2008-4432 describes a Cross-site scripting (XSS) vulnerability in the RMSOFT MiniShop module 1.0 for Xoops, exploitable via the itemsxpag parameter in search.php. Remote attackers can inject arbitrary script/HTML. The NVD lists base CVSSv2 4.3 (Medium). The connected documents provide the vul...
CVE-2008-4435
CVE-2008-4435 affects RMSOFT Downloads Plus (rmdp) module for Xoops (versions 1.5 and 1.7). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the key parameter to search.php or the id parameter to down.php. The available...
CVE-2008-4433
CVE-2008-4433 describes an SQL injection in the RMSOFT MiniShop module 1.0 for Xoops. The vulnerability is triggered via the itemsxpag parameter in search.php, allowing remote attackers to execute arbitrary SQL commands. The affected component is the MiniShop module’s search functionality, and th...
CVE-2008-4435
Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...
CVE-2008-4053
Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...
CVE-2008-4053
The CVE-2008-4053 entry describes XSS vulnerabilities in the Bluemoon PopnupBLOG module for XOOPS, specifically in index.php for versions 3.20 and 3.30, where the parameters (param, cat_id, view) can be manipulated to inject arbitrary script/HTML. The underlying issue is cross-site scripting due ...
xoops-1.3.10 shell command execute vulnerability ( causing snoopy class )
== xoops-1.3.10 shell command execute vulnerability causing snoopy class == Author: geinblues geinblues at gmail dot com DATE: 9.7.2008 Site: http://enterblue.net/x90c/ Risk: Midium == 0 Vulnerability Tracing Tracing BREAK 0 BREAK 6 /xoops-1.3.10/html/class/snoopy.class.php...
xoops-exec.txt
== xoops-1.3.10 shell command execute vulnerability causing snoopy class == Author: geinblues geinblues at gmail dot com DATE: 9.7.2008 Site: http://enterblue.net/x90c/ Risk: Midium == 0 Vulnerability Tracing Tracing BREAK 0 BREAK 6 /xoops-1.3.10/html/class/snoopy.class.php...
popnupblog-xss.txt
PopnupBlog index.php multiple variables XSS Vendor url:http://www.bluemooninc.biz/ Advisore:http://lostmon.blogspot.com/2008/08/ popnupblog-indexphp-multiple-variables.html Vendor notify:no exploits availables:yes PopnupBlog contains a flaw that allows a remote cross site scripting attack.This fl...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...