EUVD-2008-0807

Malware in sbrugna...

Joomla! MCQuiz组件'tid' SQL注入漏洞

BUGTRAQ ID: 27809 CNCAN ID:CNCAN-2008022004 Joomla! MCQuiz组件是一款基于PHP的WEB应用程序。 Joomla! MCQuiz组件不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MCQuiz 0.9 目前没有解决方案提供： http://www.joomla.org/...

CVE-2008-0800

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Sql injection

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0800

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Joomla Component MCQuiz 0.9 Final (tid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDE...

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE...

Joomla Component MCQuiz 0.9 Final (tid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component MCQuiz 0.9 Final tid SQL Injection Vulnerability =================================================================== joomla SQL Injectioncommcquiz DORK 1 ...

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...