eXV2 Module bamaGalerie 3.03 - SQL Injection

eXV2 Module bamaGalerie 3.03 - SQL Injection eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl...

eXV2 Module bamaGalerie 3.03 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications...

eXV2 Module bamaGalerie 3.03 - SQL Injection

eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/bamagalerie3" DORKS 2 : allinurl...

Cross site scripting

Cross-site scripting XSS vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a setlang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965...

CVE-2007-4365

Cross-site scripting XSS vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a setlang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965...

CVE-2007-4365

Cross-site scripting XSS vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a setlang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965...

CVE-2007-4365

CVE-2007-4365 is an XSS vulnerability affecting eXV2 CMS 2.0.5 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via a set_lang cookie to an unspecified component. Connected records also reference CVE-2007-1965 as a possible overlap. The available documents confirm the...

CVE-2007-4365: Undefined Security Weakness

Cross-site scripting XSS vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a setlang cookie to an unspecified component. NOTE: this may overlap CVE-2007-1965...

eXV2.de Browser Cookie is not properly sanitised

Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2007-1965

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2007-1966

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...

Session fixation

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...

CVE-2007-1965

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2007-1965

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...

CVE-2007-1965

CVE-2007-1965 describes multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS versions up to 2.0.4.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php. Ex...

CVE-2007-1966

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...

CVE-2007-1966

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...

CVE-2007-1966

The eXV2 CMS version 2.0.4.3 and earlier is susceptible to a session fixation vulnerability. This flaw allows remote attackers to hijack active web sessions by manually setting the PHPSESSID cookie. No specific remediation, exploit links, or MITRE ATT&CK IDs are provided in the documents.

CVE-2007-1966: Improper Authentication

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie...