Vulnerabilities in Scuttle

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в Scuttle. Уязвимости в разделе bookmarks и в скрипте index.php в параметре sort. XSS: http://site/bookmarks/3CBODY20onload=alertdocument.cookie3E http://site/?sort=223E3Cscript3Ealertdocument.cookie3C/script3E...

Joomla Component simple shop 2.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Joomla Component simple shop 2.0 SQL Injection Vulnerability ============================================================ joomla comsimpleshop SQL Injectionsection DORK 1 :...

joomlaasortymentkat-sql.txt

joomla SQL Injectioncomasortymentkatid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"comasortyment"katid DORK 2 : allinurl: EXPLOIT :...

xoopstiny-sql.txt

XOOPS Module tinyevent-print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules/tinyevent" DORK 2 : exploit working all tinyevent EXPLOIT :...

CVE-2008-0878

SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2008-0873

The CVE-2008-0873 entry describes a SQL injection in index.php of the jlmZone Classifieds module for XOOPS. The vulnerability is triggered through the cid parameter in an Adsview action, allowing remote attackers to execute arbitrary SQL commands. Affected software/component: XOOPS jlmZone Classi...

CVE-2008-0878

CVE-2008-0878 describes an SQL injection in the MyAnnonces 1.7 and earlier module for RunCMS. The vulnerability is triggered via the cid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. CVSSv2 base score is 7.5 (HIGH) with network attack, low complexity, no...

CVE-2008-0874

The vulnerability CVE-2008-0874 affects the XOOPS eEmpregos module, specifically index.php. The issue is a SQL injection in the view action triggered by the cid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2.0 base score of 7.5 ( HIGH ) with ...

CVE-2008-0874

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0854

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

Sql injection

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0877: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or HTML via the 1 frontend, 2 setfrontend, 3 jzpath, 4 theme, and 5 settheme parameters to a index.php; the frontend, theme, and 6 language parameters to b...

CVE-2008-0855: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Facile Forms comfacileforms component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2008-0873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in an Adsview action...

CVE-2008-0857: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...

CVE-2008-0874: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...

CVE-2008-0853: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comdetail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: this issue might be site-specific. If so, it should not be included in CVE...

CVE-2008-0854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comsalesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the rid parameter in a showrep action to index.php...

CVE-2008-0855

CVE-2008-0855 describes an SQL injection in the Facile Forms (com_facileforms) component for Joomla! and Mambo, exploitable via the catid parameter to index.php. The vulnerability, as documented by NVD, has a base score of 7.5 (HIGH) with network attack vector, no authentication, and partial impa...