Integramod Portal 2.x - functions_portal.php Remote File Inclusion

Integramod Portal 2.x - functionsportal.php Remote File Inclusion !/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=47 Integramod Portal Copyright...

CVE-2006-2985

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...

CVE-2006-2984

Cross-site scripting XSS vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLEURL parameter. NOTE: it is possible that this issue is resultant from SQL injection...

CVE-2006-2984

CVE-2006-2984 affects IntegraMOD 1.4.0 and earlier, with an XSS flaw in index.php exploitable via the STYLE_URL parameter. The database entries consistently cite a cross-site scripting issue, with a note that the root cause may be related to SQL injection, but the connected documents do not provi...

CVE-2006-2984

Cross-site scripting XSS vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLEURL parameter. NOTE: it is possible that this issue is resultant from SQL injection...

CVE-2006-2985

This CVE concerns SQL injection in IntegraMOD 1.4.0 (and earlier) via the STYLE_URL parameter in index.php. The root cause is unsafely encoded input (double-encoded a single quote), allowing remote attackers to craft SQL commands. Public records (NVD/NVD-derived CVE listing) confirm the affected ...

CVE-2006-2985

SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...

integramod.txt

http://target/index.php?STYLEURL=%2527 http://index.php?STYLEURL=;alertsoot;...

[SA20528] IntegraMOD "STYLE_URL" Parameter Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

'Multiple Sql injection and XSS in integramod portal

http://target/index.php?STYLEURL=2527 http://index.php?STYLEURL=script;alertsoot;/script...