CustomCMS 4.0 (CCMS) print.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= CustomCMS 4.0 CCMS print.php Remote SQL Injection Vulnerability =================================================================...

XOOPS Dictionary Module print.php id Parameter SQL Injection

The version of the Dictionary module for XOOPS installed on the remote host fails to sanitize user-supplied input to the 'id' parameter of the 'print.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to...

network-sql.txt

network print.php SQL Injectionrecipeid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"print.php?recipeid" admin login=siteadmin EXPLOIT :...

evision-sql.txt

--------------------------------------------------------------------------------------------------------------------------- | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...

Sql injection

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2008-0847

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2008-0856: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0847

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2008-0847: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

XOOPS Module myTopics (articleid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics EXPLOIT :...

XOOPS Module myTopics-print SQL Injection(articleid)

XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics example /modules/myTopics/ exploit EXPLOIT :...

XOOPS Module myTopics - articleId SQL Injection

XOOPS Module myTopics - articleId SQL Injection XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics EXPLOIT :...

CVE-2007-6142

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2007-6142

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2007-6142: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

Sql injection

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3311

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3311

The CVE-2007-3311 entry concerns the XOOPS Articles Module (version 1.02 and earlier). The vulnerability is a SQL Injection in print.php via the id parameter, caused by insufficient input sanitization. This allows a remote attacker to execute arbitrary SQL commands against the backend database. P...

CVE-2007-3311: Undefined Security Weakness

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...