CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2094

CVE-2008-2094 : The provided documents describe a SQL injection vulnerability in the XOOPS Article Module, specifically in article.php via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands through user-supplied input, thereby potentially exposing or al...

XOOPS Article Module article.php id Parameter SQL Injection

The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/article.php' script before using it to build a database query...

XOOPS 2.0.14 Article Module - article.php SQL Injection

XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

XOOPS 2.0.14 Article Module - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

xoopsall-sql.txt

/Cr@zyKing / http://coderx.org Xoops All Version -Articles- Article.PHP ID Blind SQL Injection ExpL0it Sql 1-2 article.php?id=3+union+select+1,2,3,4,5,6,AESDECRYPTAESENCRYPTUSER,0x71,0x71,8,9,0,1,2,3,4,5,6,7,8,9,0/...

BosNews 4.0 - 'article' SQL Injection

By CrackersChild [email protected] BosNews v4.0 Remote Sql injection Exploit Script website:http://www.bosdev.com Exploit : " site.com/path/news.php?news=more&article=248+union%20select%200,1,username,password,4%20from%20bosdevUUS/ milw0rm.com 2008-04-14...

CVE-2008-1533

CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...

Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Component Comments = 0.5.8.5g SQL Injection Vulnerability ================================================================ Mambo SQL Injection comcomments Version...

C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability

Background ----------------- GE-Fanuc's Proficy Information Portal 2.6 is a web based reporting application for the SCADA environment. As such it will usually be installed in a buffer zone between the SCADA and the corporate network, which makes it a very sensitive application as it can access bo...

Sql injection

Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...

CVE-2008-0286

SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 password fields...

Sql injection

SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 password fields...

CVE-2008-0286

SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 password fields...

CVE-2008-0286

CVE-2008-0286 : A SQL injection vulnerability exists in the admin/login.php of Article Dashboard, allowing remote attackers to execute arbitrary SQL commands via the (1) user or (2) password fields. The issue is publicly documented in NVD and CVE records, with no explicit remediation details prov...

lulieblog-bypass.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from spain download:...

LulieBlog 1.0.1 - Remote Authentication Bypass

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from spain download:...

Article Dashboard - adminlogin.php Multiple SQL Injections

Article Dashboard - adminlogin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27286/info Article Dashboard is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Article Dashboard - '/admin/login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27286/info Article Dashboard is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

LulieBlog 1.0.1 (delete id) Remote Admin Bypass Vulnerability

Exploit for unknown platform in category web applications ============================================================= LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability =============================================================...