wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities

No description provided by source. wolioCMS - SQL Injection and Bypass Administrator Login Vendor : http://www.buton.web.id/member.php?member=anon Download : http://www.buton.web.id/download/woliocms.zip Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net...

CVE-2007-3559

Cross-site scripting XSS vulnerability in infusions/shoutboxpanel/shoutboxpanel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSIONQUERY constant...

Cross site scripting

Cross-site scripting XSS vulnerability in infusions/shoutboxpanel/shoutboxpanel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSIONQUERY constant...

CVE-2007-3559

Cross-site scripting XSS vulnerability in infusions/shoutboxpanel/shoutboxpanel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSIONQUERY constant...

CVE-2007-3559

The CVE-2007-3559 affects PHP-Fusion 6.01.9 and 6.01.10, specifically the infusions/shoutbox_panel/shoutbox_panel.php component. The vulnerability is a Cross-Site Scripting (XSS) issue related to the FUSION_QUERY constant when guest posts are enabled, allowing remote authenticated users to inject...

Code injection

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

CVE-2007-3469 affects Sun Solaris 10: a vulnerability in the TCP Loopback/Fusion implementation that allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors. The vulnerability is local and requires no authentication. Publicly linked patch ref...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1980

SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1980

The CVE-2007-1980 vulnerability affects the Topliste 1.0 module for PHP-Fusion, specifically in index.php. It is a SQL injection flaw exploitable via the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network access, low a...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

Sql injection

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

CVE-2007-1978 : SQL injection in the Arcade 1.00 module for PHP-Fusion (index.php, view_game_list action) allows remote attackers to inject arbitrary SQL via the cid parameter. Root cause is unsanitized input leading to database query manipulation. Documents do not provide explicit patch version ...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...