exoopsglossaire-sql.txt

XOOPS module glossaire SQL Injection powered by e-xoopsglossaireSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: id "modules glossaire" EXPLOIT :...

exoopsmyadress-sql.txt

powered by e-xoopsmyadressSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "/modules/myadress/" EXPLOIT :...

XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== XOOPS Module tutorials printpage.php SQL Injection Vulnerability ================================================================== DORKS 1 : allinurl :"/modules/tutorials/...

XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

XOOPS Module Glossario 2.2 (sid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

CVE-2003-1550

CVE-2003-1550 affects XOOPS 2.0 (and possibly earlier versions). The vulnerability arises from handling a malformed xoopsOption parameter, which allows remote attackers to cause error messages that reveal the installation path, exposing sensitive information. The issue is a information disclosure...

CVE-2003-1550

XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message...

XOOPS Module wfdownloads (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= XOOPS Module wfdownloads cid Remote SQL Injection Vulnerability ================================================================= XOOPS module wfdownloads SQL Injection DORK...

CVE-2003-1550: Exposure of Sensitive Information to an Unauthorized Actor

XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message...

XOOPS Module Glossario 2.2 - 'sid' SQL Injection

XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

XOOPS Module Glossario 2.2 (sid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Glossario 2.2 sid Remote SQL Injection Vulnerability =================================================================== XOOPS module glossaires SQL Injection...

XOOPS Module Glossario 2.2 - sid SQL Injection

XOOPS Module Glossario 2.2 - sid SQL Injection XOOPS module glossaires SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/glossaires" EXPLOIT :...

XOOPS Module wfdownloads - cid SQL Injection

XOOPS Module wfdownloads - cid SQL Injection XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

XOOPS Module wfdownloads - 'cid' SQL Injection

XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

Sql injection

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2008-1063

Cross-site scripting XSS vulnerability index.php in the XM-Memberstats xmmemberstats module for XOOPS allows remote attackers to inject arbitrary web script or HTML via the sortby parameter...

CVE-2008-1065

Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats xmmemberstats 2.0e module for XOOPS allow remote attackers to execute arbitrary SQL commands via the 1 letter or 2 sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-1065

CVE-2008-1065 affects the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS. The vulnerability is a SQL injection in index.php caused by unsafely handled input in the (1) letter and (2) sortby parameters, enabling remote attackers to craft SQL commands. The reports do not provide explicit expl...

CVE-2008-1063

CVE-2008-1063 : A cross-site scripting (XSS) vulnerability in the XM-Memberstats module for XOOPS, exploitable via the sortby parameter in index.php. The affected component is the XM-Memberstats module integrated with XOOPS; the underlying cause is unsanitized input in sortby, enabling remote att...