17 matches found
EUVD-2007-1804
Malware in sbrugna...
EUVD-2008-3546
Malware in sbrugna...
XOOPS Module Kshop Remote SQL Injection (CVE-2007-1810)
An SQL injection vulnerability has been reported in Kaotik Kshop. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Kshop 2.22 'kshop_search.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of ...
Cross site scripting
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-3560
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-3560
The CVE-2008-3560 entry describes a Cross-site scripting (XSS) flaw in the Kshop module 2.22 for Xoops, exploitable via the search parameter in kshop_search.php. Affected component: kshop_search.php (Kshop 2.22 for Xoops). Root cause: input not properly sanitized, enabling injection of arbitrary ...
CVE-2008-3560
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
Kshop 2.22 - kshop_search.php Cross-Site Scripting
Kshop 2.22 - kshopsearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in...
kshop-xss.txt
Kshop module search variable&field remote XSS Vendor url:http://www.kaotik.biz/ Advisore:http://lostmon.blogspot.com/2008/08/ kshop-module-search-variable-and-field.html Vendor notify:no exploit available:YES Kshop is a E-commerce php/Mysql script module for multiple CMS Systems like...
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
CVE-2007-1810
SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1810
CVE-2007-1810 is a SQL injection vulnerability in the Kshop 1.17 and earlier module for Xoops. The flaw affects product_details.php where the id parameter can be manipulated to execute arbitrary SQL commands on the database by remote attackers. The NVD entry lists a high impact (CVSS v2 base scor...
CVE-2007-1810
SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Module Kshop 1.17 - id SQL Injection
XOOPS Module Kshop 1.17 - id SQL Injection !/usr/bin/perl Script Name: XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
XOOPS Module Kshop <= 1.17 (id) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print...
XOOPS Module Kshop 1.17 - 'id' SQL Injection
!/usr/bin/perl Script Name: XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...