700 matches found
CVE-2007-3311
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3311
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3311
The CVE-2007-3311 entry concerns the XOOPS Articles Module (version 1.02 and earlier). The vulnerability is a SQL Injection in print.php via the id parameter, caused by insufficient input sanitization. This allows a remote attacker to execute arbitrary SQL commands against the backend database. P...
Default credentials
Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...
CVE-2007-2554
Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...
CVE-2007-2554
CVE-2007-2554 affects Associated Press (AP) Newspower 4.0.1 and earlier. The root cause is a default blank MySQL root password, enabling remote attackers to insert or modify news articles via shows.tblscript. The observed impact is potential unauthenticated data integrity compromise (article inse...
XOOPS module Articles 1.03 - index.php?cat_id SQL Injection
XOOPS module Articles 1.03 - index.php?catid SQL Injection !/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop...
Xoops module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles 1.03 - 'index.php?cat_id' SQL Injection
!/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles 1.02 - print.php?id SQL Injection
XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...
XOOPS Articles Module print.php id Parameter SQL Injection
The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/print.php' script before using it to build a database query...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
CVE-2006-7052
The CVE-2006-7052 entry affects DotWidget For Articles (dotwidgeta) version 0.2, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can trigger arbitrary code execution by supplying a URL path in the file_path parameter for index.php, showcatpicks.php, and showarticle.php...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
PHP-Nuke Block-Old_Articles.PHP SQL注入漏洞
PHP-Nuke是一款基于PHP的站点构架程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Block-OldArticles.PHP'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 PHP-Nuke 7.9 PHP-Nuke 7.8 PHP-Nuke 7.7 PHP-Nuke 7.6 PHP-Nuke 7.5 PHP-Nuke 7.4 PHP-Nuke 7.3 PHP-Nuke 7.2 PHP-Nuke 7.1 PHP-Nuke 7.0 目前没有解决方案提供：...
PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...
CVE-2006-6925
Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...