EUVD-2010-1506

Malware in sbrugna...

CVE-2018-18431

DESTOON B2B 7.0 contains a cross-site scripting (XSS) vulnerability exposed via text boxes when visiting admin.php?moduleid=2&action=add. The CVE entry and CNVD/NVD variants describe the same issue, with no explicit details on affected build flavors beyond version 7.0 and the vulnerable input poi...

PT-2018-14457

Name of the Vulnerable Software and Affected Versions DESTOON B2B version 7.0 Description An issue exists where XSS is possible via certain text boxes to the "admin.php?moduleid=2&action=add" URI. Recommendations For DESTOON B2B version 7.0, consider restricting access to the admin.php module to...

Digital Campus 2.0数字校园平台 /Page/ShowInfo.aspx 参数ModuleID SQL注入漏洞

No description provided by source...

PT-2011-1833

Name of the Vulnerable Software and Affected Versions Joomla! Gantry com gantry component version 3.0.10 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the moduleid parameter to the "index.php" endpoint. Recommendations For version 3.0.10,...

CVE-2010-4898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Gantry comgantry component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php...

RokModule Component for Joomla! 'moduleid' Parameter SQi

The version of the RokModule component for Joomla! running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'moduleid' parameter before using it to construct database queries. Regardless of the PHP 'magicquotesgpc' setting,...

CVE-2010-1479: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the RokModule comrokmodule component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter in a raw action to index.php...

Sql injection

SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4423

CVE-2009-4423 affects weenCompany 4.0.0. A flaw in index.php allows remote SQL command execution via the moduleid parameter (SQL injection). The vulnerability is documented across multiple sources as a SQLi issue with impact to confidentiality, integrity, and availability (partial). No explicit r...

CVE-2009-4423: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in weenCompany 4.0.0 allows remote attackers to execute arbitrary SQL commands via the moduleid parameter. NOTE: some of these details are obtained from third party information...

weenCompany SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================= weenCompany SQL Injection Vulnerability ======================================= weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Dork:"Created by weenCompany"...

weenCompany - SQL Injection

weenCompany - SQL Injection weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Dork:"Created by weenCompany" Exploit: http://server/index.php?moduleid=m2newsSQL-inj&articleid=1 Greetz: Manas58 Baybora...