17 matches found
EUVD-2007-1804
Malware in sbrugna...
EUVD-2008-3546
Malware in sbrugna...
XOOPS Module Kshop Remote SQL Injection (CVE-2007-1810)
An SQL injection vulnerability has been reported in Kaotik Kshop. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Kshop 2.22 'kshop_search.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of ...
Cross site scripting
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-3560
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2008-3560
The CVE-2008-3560 entry describes a Cross-site scripting (XSS) flaw in the Kshop module 2.22 for Xoops, exploitable via the search parameter in kshop_search.php. Affected component: kshop_search.php (Kshop 2.22 for Xoops). Root cause: input not properly sanitized, enabling injection of arbitrary ...
CVE-2008-3560
Cross-site scripting XSS vulnerability in kshopsearch.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary web script or HTML via the search parameter...
kshop-xss.txt
Kshop module search variable&field remote XSS Vendor url:http://www.kaotik.biz/ Advisore:http://lostmon.blogspot.com/2008/08/ kshop-module-search-variable-and-field.html Vendor notify:no exploit available:YES Kshop is a E-commerce php/Mysql script module for multiple CMS Systems like...
Kshop 2.22 - kshop_search.php Cross-Site Scripting
Kshop 2.22 - kshopsearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in...
Kshop 2.22 - 'kshop_search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30576/info Kshop is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
CVE-2007-1810
SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1810
SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1810
CVE-2007-1810 is a SQL injection vulnerability in the Kshop 1.17 and earlier module for Xoops. The flaw affects product_details.php where the id parameter can be manipulated to execute arbitrary SQL commands on the database by remote attackers. The NVD entry lists a high impact (CVSS v2 base scor...
XOOPS Module Kshop 1.17 - id SQL Injection
XOOPS Module Kshop 1.17 - id SQL Injection !/usr/bin/perl Script Name: XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
XOOPS Module Kshop <= 1.17 (id) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print...
XOOPS Module Kshop 1.17 - 'id' SQL Injection
!/usr/bin/perl Script Name: XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...