146 matches found
CVE-2007-3453
SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components...
CVE-2007-3453: Undefined Security Weakness
SQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter to certain components...
CVE-2007-3453
CVE-2007-3453 concerns a SQL injection vulnerability in Papoo 3.6 (and possibly earlier) that allows remote attackers to execute arbitrary SQL commands via the selmenuid parameter in certain components. The available connected documents corroborate the vulnerability type and affected product, but...
Papoo 1.0.3 - Plugin.php Authentication Bypass
Papoo 1.0.3 - Plugin.php Authentication Bypass source: https://www.securityfocus.com/bid/24634/info Papoo is prone to an authentication-bypass vulnerability because the application fails to check user privileges when accessing the administration pages. An attacker can exploit this issue to gain...
[Full-disclosure] Papoo CMS 3.6 - Access Restriction Bypass
Papoo Content Management System Backend Access Restriction Bypass Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at...
[Full-disclosure] Papoo CMS 3.6 - SQL Injection
Papoo Content Management System Backend SQL Injection Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at http://www.papoo.de/index/menuid/204/reporeid/215 Details...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...
CVE-2007-3269
Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...
CVE-2007-3269
Papoo Light 3.6 before 20070611 is affected by multiple XSS vulnerabilities per CVE-2007-3269: an attacker can inject arbitrary script via (1) the URI in a GET request, (2) the Title field of a visitor comment, and (3) a message to another user. The note mentions that vector (2) might overlap CVE...
CVE-2007-3269
Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...
CVE-2007-3269: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...
Papoo CMS - Multiple Cross Site Scripting
Papoo Content Management System Multiple Cross Site Scriptings Jun 12 2007 ------------------------------------------------------------------------------- Product Papoo Content Management System Vulnerable Versions Papoo Light 3.6 Vendor Status The Vendor was notified and the issue fixed. A patch...
Sql injection
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...
CVE-2007-2320
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...
CVE-2007-2320
Papoo vulnerable component: kontakt.php in Papoo 3.02 and earlier. The issue is an SQL injection manifested through the menuid parameter, allowing remote attackers to execute arbitrary SQL commands. This CVE is referenced alongside CVE-2005-4478, indicating a related vulnerability family in Papoo...
CVE-2007-2320
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...
CVE-2007-2320: Undefined Security Weakness
SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...
papoo-sql.txt
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==1...
Papoo 3.02 (kontakt menuid) Remote SQL Injection Exploit
No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. //dork: \"Help Contact Imprint Sitemap\" | \"powered by papoo\" | \"powered...
Papoo <= 3.02 (kontakt menuid) Remote SQL Injection Exploit
No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. //dork: "Help Contact Imprint Sitemap" | "powered by papoo" | "powered by cms papoo"...