CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

rmsoft-xss.txt

RMSOFT Downloads Plus two scripts two variables XSS Vendor url:http://www.xoops-mexico.net/ Advisore:http://lostmon.blogspot.com/2008/08/ rmsoft-downloads-plus-two-scripts-two.html Vendor notify:no exploits availables:yes RMSOFT Downloads Plus is a download php/Mysql script module for multiple CM...

rmsoftminishop-xss.txt

RMSOFT MiniShop module multiple variable XSS Vendor url:http://redmexico.com.mx Advisore:http://lostmon.blogspot.com/2008/08 /rmsoft-minishop-module-multiple.html Vendor notify:no exploit available:yes RMSOFT MiniShop is a E-commerce php/Mysql script module for multiple CMS Systems like...

RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities

RMSOFT MiniShop 1.0 - search.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30616/info RMSOFT MiniShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these...

RMSOFT Downloads Plus - (rmdp) 1.51.7 Module for XOOPS search.php?key Cross-Site Scripting

RMSOFT Downloads Plus - rmdp 1.51.7 Module for XOOPS search.php?key Cross-Site Scripting source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

RMSOFT Downloads Plus - (rmdp) 1.51.7 Module for XOOPS down.php?id Cross-Site Scripting

RMSOFT Downloads Plus - rmdp 1.51.7 Module for XOOPS down.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

RMSOFT MiniShop 1.0 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30616/info RMSOFT MiniShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS search.php?key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

RMSOFT Downloads Plus - '/(rmdp) 1.5/1.7 Module for XOOPS down.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30620/info RMSOFT Downloads Plus is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Cross site scripting

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1064

Cross-site scripting XSS vulnerability in images.php in the Red Mexico RMSOFT Gallery System GS 2.0 module aka rmgs for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2008-1064

The CVE-2008-1064 entry concerns the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS, specifically in images.php where a Cross-site scripting (XSS) vulnerability exists. The underlying issue is an ability to inject arbitrary web script or HTML via the q parameter, enabling a...

RMSOFT Gallery System 2.0 (images.php id) SQL Injection Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-= Author: youkn0w Contact: you-knowatlinuxmail.org Website: www.youknowz.info Script: RRMSOFT Gallery Bug: RRMSOFT Gallery Remote SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-= Script Information...

CVE-2008-0611

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0611

CVE-2008-0611 : SQL injection in the RMSOFT Gallery System 2.0 module for XOOPS (rmgs/images.php) allows remote attackers to run arbitrary SQL via the id parameter. Affected component: rmgs/images.php in RMSOFT Gallery System 2.0 for XOOPS. Consequences: partial impact to confidentiality, integri...

RMSOFT Gallery System 2.0 (images.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== RMSOFT Gallery System 2.0 images.php id SQL Injection Vulnerability =====================================================================...

CVE-2006-5532

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5532

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5532

CVE-2006-5532 affects RMSOFT Gallery System 2.0, specifically the Images.PHP handler (rmgs/images.php). The vulnerability arises from insufficient sanitization of user-supplied input in the kw parameter, enabling a cross-site scripting (XSS) payload to execute in the victim’s browser. The issue i...