CVE-2010-4155

The CVE-2010-4155 entry documents multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10, allowing remote attackers to inject arbitrary HTML/JS when user input is not properly sanitized. Affected vectors include the rssfeedURL parameter to manual/caferss/example.php and the sumb par...

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/44169/info eXV2 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

eXV2 CMS - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44169/info eXV2 CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2008-1404

SQL injection vulnerability in index.php in the Viso Industry Book 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter...

Sql injection

SQL injection vulnerability in index.php in the Viso Industry Book 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter...

Sql injection

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the lid parameter in an ImprAnn action...

Sql injection

SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the roomid parameter...

CVE-2008-1406

SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the lid parameter in an ImprAnn action...

CVE-2008-1407

SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the roomid parameter...

CVE-2008-1406

CVE-2008-1406 describes an SQL injection in the MyAnnonces 1.8 module for eXV2, in annonces-p-f.php. The vulnerability is exploitable via the lid parameter in an ImprAnn action, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected component and...

CVE-2008-1407

The provided connected documents identify a concrete vulnerability: an SQL injection in the WebChat 1.60 module for eXV2, affecting index.php. The vulnerability is triggered via the roomid parameter, enabling remote attackers to inject arbitrary SQL commands. The root cause is unsafe handling of ...

CVE-2008-1404

CVE-2008-1404 describes an SQL injection in the Viso (Industry Book) module for eXV2, affecting versions 2.04 and 2.03. The vulnerability is in index.php via the kid parameter, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the connected docume...

CVE-2008-1349

SQL injection vulnerability in viewcat.php in the bamaGalerie Bama Galerie 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1349

SQL injection vulnerability in viewcat.php of the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to execute arbitrary SQL via the cid parameter. Affected component: viewcat.php within the bamaGalerie module; root cause: input from cid not being safely hand...

eXV2 Module Viso <= 2.0.4.3 (kid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 Viso 2.03 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/viso" EXPLOIT 1 :...

eXV2 Module eblog 1.2 (blog_id) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/eblog" DORK 2 : allinurl :"exoops/modules/eblog" EXPLOIT :...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

eXV2 Module MyAnnonces (lid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 MyAnnonces 1.8 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : eXV2 MyAnnonces EXPLOIT :...

eXV2 Module WebChat 1.60 - roomid SQL Injection

eXV2 Module WebChat 1.60 - roomid SQL Injection Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

exv2eblog-sql.txt

Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"modules/eblog" DORK 2 : allinurl :"exoops/modules/eblog" EXPLOIT :...