Lucene search
+L

50 matches found

Prion
Prion
•added 2012/11/19 12:10 p.m.•26 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 find or 2 replace fields to havalite/findReplace.php; 3 username parameter to havalite/havalogin.php, 4 the Edit Article module, or 5 havapost.ph...

4.3CVSS6.1AI score0.01822EPSS
SaveExploits2References6Affected Software1
zdt
zdt
•added 2011/09/26 12:00 a.m.•18 views

Jarida 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 0...

7.1AI score
SaveExploits0
Prion
Prion
•added 2008/05/06 4:20 p.m.•26 views

Sql injection

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.0098EPSS
SaveExploits3References4
NVD
NVD
•added 2008/05/06 4:20 p.m.•31 views

CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.0098EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2008/05/06 4:00 p.m.•36 views

CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.0098EPSS
SaveExploits3References4
CVE
CVE
•added 2008/05/06 4:00 p.m.•56 views

CVE-2008-2094

CVE-2008-2094 : The provided documents describe a SQL injection vulnerability in the XOOPS Article Module, specifically in article.php via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands through user-supplied input, thereby potentially exposing or al...

7.5CVSS6.6AI score0.0098EPSS
SaveExploits3References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/05/06 12:00 a.m.•5 views

CVE-2008-2094: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.0098EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
•added 2008/04/23 12:00 a.m.•27 views

XOOPS Article Module article.php id Parameter SQL Injection

The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/article.php' script before using it to build a database query...

7.5CVSS5.6AI score0.0098EPSS
SaveExploits3References2
exploitpack
exploitpack
•added 2008/04/21 12:00 a.m.•27 views

XOOPS 2.0.14 Article Module - article.php SQL Injection

XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

8.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/04/21 12:00 a.m.•34 views

XOOPS 2.0.14 Article Module - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

7.5CVSS5.8AI score0.0098EPSS
SaveExploits3
Rows per page
Query Builder