349 matches found
Sql injection
SQL injection vulnerability in index.php in the Glossary comglossary 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action...
CVE-2008-0514
CVE-2008-0514 affects the Glossary (com_glossary) 2.0 component used by Mambo/Joomla!, where index.php is vulnerable to SQL injection through the catid parameter in a display action. The issue enables remote attackers to execute arbitrary SQL commands and potentially access or modify data. The vu...
CVE-2008-0514
SQL injection vulnerability in index.php in the Glossary comglossary 2.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action...
Mambo Component Glossary 2.0 (catid) SQL Injection Vulnerability
No description provided by source. joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...
Mambo Component Glossary 2.0 (catid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Mambo Component Glossary 2.0 catid SQL Injection Vulnerability ================================================================ joomlaGlossary V2.0 SQL Injectioncomglossary...
Mambo Component 'com_glossary' 2.0 - 'catid' SQL Injection
joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...
Mambo Component com_glossary 2.0 - catid SQL Injection
Mambo Component comglossary 2.0 - catid SQL Injection joomlaGlossary V2.0 SQL Injectioncomglossary AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comglossary" dork 2 : Glossary V2.0 exploit working html sites EXPLOIT :...
CVE-2006-5946
SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands via the alpha parameter...
CVE-2006-5946
SQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote attackers to execute arbitrary SQL commands via the alpha parameter...
CVE-2006-5946
CVE-2006-5946 affects FunkyASP Glossary 1.0. The vulnerability is an SQL injection in demo/glossary/glossary.asp, exploitable via the alpha parameter to cause remote execution of arbitrary SQL. NVD metrics indicate a high impact with Partial confidentiality, integrity, and availability, base scor...
PT-2006-6611 · Funkyasp · Funkyasp Glossary
Name of the Vulnerable Software and Affected Versions: FunkyASP Glossary version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in the demo/glossary/glossary.asp file. Recommendations: For FunkyASP Glossary...
FunkyASP Glossary v1.0 [injection sql]
vendor site:http://www.funkyasp.co.uk/ product:FunkyASP Glossary v1.0 bug:injection sql risk:medium injection sql : http://www.demo.funkyasp.co.uk/demo/glossary/glossary.asp?alpha='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...
funkyasp10.txt
vendor site:http://www.funkyasp.co.uk/ product:FunkyASP Glossary v1.0 bug:injection sql risk:medium injection sql : http://www.demo.funkyasp.co.uk/demo/glossary/glossary.asp?alpha='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
FunkyASP Glossary 1.0 - Glossary.asp SQL Injection
FunkyASP Glossary 1.0 - Glossary.asp SQL Injection source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Moodle SQL injection flaws
The remote host is running a version of the Moodle suite, an open-source course management system written in PHP, which is older than version 1.4.3. The remote version of this software is vulnerable to SQL injection issue in 'glossary' module due to a lack of user input sanitization. OpenVAS...
Moodle SQL injection flaws
The remote version of Moodle is vulnerable to a SQL injection issue in SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
jawsGlossary.txt
XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...
CVE-2004-2232
The CVE covers Moodle
CVE-2004-2232
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements...
CVE-2005-1800
JAWS Glossary Gadget XSS (CVE-2005-1800) affects versions 0.4–0.5.1. The flaw stems from inadequate validation of user input in the GlossaryModel/view term handling for the term parameter to index.php, allowing remote script/HTML injection via XSS. Impact is web-based cross-site scripting; exploi...