758 matches found
CVE-2007-3311
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-3311
The CVE-2007-3311 entry concerns the XOOPS Articles Module (version 1.02 and earlier). The vulnerability is a SQL Injection in print.php via the id parameter, caused by insufficient input sanitization. This allows a remote attacker to execute arbitrary SQL commands against the backend database. P...
CVE-2007-2554
Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...
Default credentials
Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...
CVE-2007-2554
CVE-2007-2554 affects Associated Press (AP) Newspower 4.0.1 and earlier. The root cause is a default blank MySQL root password, enabling remote attackers to insert or modify news articles via shows.tblscript. The observed impact is potential unauthenticated data integrity compromise (article inse...
Xoops module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles 1.03 - index.php?cat_id SQL Injection
XOOPS module Articles 1.03 - index.php?catid SQL Injection !/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop...
XOOPS module Articles 1.03 - 'index.php?cat_id' SQL Injection
!/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou...
XOOPS module Articles 1.02 - print.php?id SQL Injection
XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...
XOOPS Articles Module print.php id Parameter SQL Injection
The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/print.php' script before using it to build a database query...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
CVE-2006-7052
The CVE-2006-7052 entry affects DotWidget For Articles (dotwidgeta) version 0.2, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can trigger arbitrary code execution by supplying a URL path in the file_path parameter for index.php, showcatpicks.php, and showarticle.php...
CVE-2006-7052
Multiple PHP remote file inclusion vulnerabilities in DotWidget For Articles dotwidgeta 0.2 allow remote attackers to execute arbitrary code via a URL in the 1 filepath parameter to a index.php, b showcatpicks.php, and c showarticle.php; and the 2 adminheaderfile and 3 adminfooterfile parameters ...
PHP-Nuke Block-Old_Articles.PHP SQL注入漏洞
PHP-Nuke是一款基于PHP的站点构架程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Block-OldArticles.PHP'脚本对用户提交的'cat'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 PHP-Nuke 7.9 PHP-Nuke 7.8 PHP-Nuke 7.7 PHP-Nuke 7.6 PHP-Nuke 7.5 PHP-Nuke 7.4 PHP-Nuke 7.3 PHP-Nuke 7.2 PHP-Nuke 7.1 PHP-Nuke 7.0 目前没有解决方案提供：...
PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
/ -------------------------------------------------------- Neo Security Team NST - Advisory 31 - 2007-01-13 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...
CVE-2006-6925
Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...
Interview:w00w00
w00w00 One of the first to respond to a request for an interview was w00w00 pronounced "woo-woo", their website . A group highly respected among those who are interested in security issues - they have discovered a lot of holes in security systems, many interesting tactics of hacker attacks. The...
eggblog=> 3.1.0 Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM eggblog=...