50 matches found
Integramod Portal <= 2.x (functions_portal.php) Remote Include Exploit
No description provided by source. !/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=47 Integramod Portal = 2.x Remote Command Execution Exploit Th...
CVE-2006-2984
Cross-site scripting XSS vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLEURL parameter. NOTE: it is possible that this issue is resultant from SQL injection...
CVE-2006-2985
SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...
CVE-2006-2985
SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLEURL parameter...
CVE-2006-2984
Cross-site scripting XSS vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLEURL parameter. NOTE: it is possible that this issue is resultant from SQL injection...
CVE-2006-2984
CVE-2006-2984 affects IntegraMOD 1.4.0 and earlier, with an XSS flaw in index.php exploitable via the STYLE_URL parameter. The database entries consistently cite a cross-site scripting issue, with a note that the root cause may be related to SQL injection, but the connected documents do not provi...
CVE-2006-2985
This CVE concerns SQL injection in IntegraMOD 1.4.0 (and earlier) via the STYLE_URL parameter in index.php. The root cause is unsafely encoded input (double-encoded a single quote), allowing remote attackers to craft SQL commands. Public records (NVD/NVD-derived CVE listing) confirm the affected ...
integramod.txt
http://target/index.php?STYLEURL=%2527 http://index.php?STYLEURL=;alertsoot;...
[SA20528] IntegraMOD "STYLE_URL" Parameter Cross-Site Scripting
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...