CVE-2008-0800

CVE-2008-0800 is a SQL injection vulnerability in index.php of the McQuiz (com_mcquiz) 0.9 Final component for Joomla! that allows remote attackers to execute arbitrary SQL commands via the tid parameter in a user_tst_shw action. Affected product: McQuiz 0.9 Final. Root cause: unsafely constructe...

CVE-2008-0800: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...