Lucene search
+L

5 matches found

Packet Storm
Packet Storm
•added 2008/03/12 12:00 a.m.•35 views

exoopsglossaire-sql.txt

XOOPS module glossaire SQL Injection powered by e-xoopsglossaireSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: id "modules glossaire" EXPLOIT :...

7.4AI score
SaveExploits0
Prion
Prion
•added 2007/05/17 7:30 p.m.•27 views

Sql injection

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

7.5CVSS9.1AI score0.01041EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2007/05/17 7:00 p.m.•37 views

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

8.4AI score0.01041EPSS
SaveExploits2References5
CVE
CVE
•added 2007/05/17 7:00 p.m.•61 views

CVE-2007-2738

The CVE-2007-2738 entry corresponds to a SQL injection vulnerability in the Glossaire module for XOOPS (version 1.7 and earlier). The flaw resides in glossaire-p-f.php, where the sid parameter used in an ImprDef action is not properly sanitized, allowing remote attackers to execute arbitrary SQL ...

7.5CVSS8.4AI score0.01041EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/17 12:00 a.m.•6 views

CVE-2007-2738: Undefined Security Weakness

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

7.5CVSS6.4AI score0.01041EPSS
SaveExploits2References1
Rows per page
Query Builder