EUVD-2008-0807

Malware in sbrugna...

Joomla! MCQuiz组件'tid' SQL注入漏洞

BUGTRAQ ID: 27809 CNCAN ID:CNCAN-2008022004 Joomla! MCQuiz组件是一款基于PHP的WEB应用程序。 Joomla! MCQuiz组件不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 MCQuiz 0.9 目前没有解决方案提供： http://www.joomla.org/...

Sql injection

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0800

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

CVE-2008-0800

SQL injection vulnerability in index.php in the McQuiz commcquiz 0.9 Final component for Joomla! allows remote attackers to execute arbitrary SQL commands via the tid parameter in a usertstshw action...

Joomla Component MCQuiz 0.9 Final (tid) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDE...

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection

Joomla! Component MCQuiz 0.9 Final - tid SQL Injection joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE...

Joomla Component MCQuiz 0.9 Final (tid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component MCQuiz 0.9 Final tid SQL Injection Vulnerability =================================================================== joomla SQL Injectioncommcquiz DORK 1 ...

Joomla! Component MCQuiz 0.9 Final - 'tid' SQL Injection

joomla SQL Injectioncommcquiz AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: commcquiz "tid" DORK 2 : allinurl: commcquiz ATTACKER CAN SEE PASSWORD AND USERNAME UNDER PAGE...