CVE-2008-0878

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

Sql injection

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0874

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0874

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0879: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in the WebLinks module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action...

CVE-2008-0873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action...

CVE-2008-0874: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0878: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

runcmsmyannonces-sql.txt

runcms MyAnnonces SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules MyAnnonces index php pa view" EXAMPLE XXXXMyAnnonces/index.php?pa=view&cid=EXPLOiT EXPLOIT : for admin =...

PHP-Nuke Module books SQL (cid) Remote SQL Injection Vulnerability

No description provided by source. PHP-Nuke Module books SQL Injectionfile AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: modules-php-op-modload "req viewcat" example...

CVE-2008-0827: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...

RunCMS Module MyAnnonces - 'cid' SQL Injection

runcms MyAnnonces SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: "modules MyAnnonces index php pa view" EXAMPLE XXXXMyAnnonces/index.php?pa=view&cid=EXPLOiT EXPLOIT : for admin =...

XOOPS Module Classifieds - 'cid' SQL Injection

XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example http://xxxx/modules/classifieds/index.php?pa=Adsview&cid=exploit EXPLOIT :...

XOOPS Module eEmpregos - 'cid' SQL Injection

XOOPS Module eEmpregos SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: "modules/eEmpregos/index.php" DORK 2 : allinurl: cid "modules/eEmpregos" example...

CVE-2008-0280: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the 1 a or 2 cid parameter...

Ubuntu 5.04 / 5.10 / 6.06 LTS : libxfont, xorg vulnerabilities (USN-344-1)

iDefense security researchers found several integer overflows in X.org's font handling library. By using a specially crafted Type1 CID font file, a local user could exploit these to crash the X server or execute arbitrary code with root privileges. Note that Tenable Network Security has extracted...

CVE-2003-1468: Exposure of Sensitive Information to an Unauthorized Actor

The WebLinks module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message...

openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-2056)

This update fixes an integer overflow vulnerability when rendering CID-keyed fonts CVE-2006-3739/CVE-2006-3740. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xorg-x11-server-2056. The text...

Sql injection

SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-5316: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...