XOOPS Module Glossario 2.2 (sid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Glossario 2.2 sid Remote SQL Injection Vulnerability =================================================================== XOOPS module glossaires SQL Injection...

XOOPS Module wfdownloads - cid SQL Injection

XOOPS Module wfdownloads - cid SQL Injection XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

XOOPS Module Glossario 2.2 - sid SQL Injection

XOOPS Module Glossario 2.2 - sid SQL Injection XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

XOOPS Module wfdownloads - 'cid' SQL Injection

XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

XOOPS Module Glossario 2.2 - 'sid' SQL Injection

XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= XOOPS Module wfdownloads cid Remote SQL Injection Vulnerability ================================================================= XOOPS module wfdownloads SQL Injection DORK...

Sql injection

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1063

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2008-1065

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2008-1063

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2008-1064

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1064

The CVE-2008-1064 entry concerns the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS, specifically in images.php where a Cross-site scripting (XSS) vulnerability exists. The underlying issue is an ability to inject arbitrary web script or HTML via the q parameter, enabling a...

CVE-2008-1063

CVE-2008-1063 : A cross-site scripting (XSS) vulnerability in the XM-Memberstats module for XOOPS, exploitable via the sortby parameter in index.php. The affected component is the XM-Memberstats module integrated with XOOPS; the underlying cause is unsanitized input in sortby, enabling remote att...

CVE-2008-1065

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1065

CVE-2008-1065 affects the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS. The vulnerability is a SQL injection in index.php caused by unsafely handled input in the (1) letter and (2) sortby parameters, enabling remote attackers to craft SQL commands. The reports do not provide explicit expl...

Sql injection

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

Sql injection

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0936

SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...