Tiny Portal 1.0 - 'shouts' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28630/info Tiny Portal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

Sql injection

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0937

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

CVE-2008-0937

The CVE-2008-0937 entry describes a SQL injection vulnerability in the Tiny Event (tinyevent) 1.01 module for XOOPS. An attacker can manipulate the id parameter in a print action to execute arbitrary SQL commands. The connected documents corroborate the vulnerability, including references to rela...

CVE-2008-0937: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action, a different vector than CVE-2007-1811...

XOOPS Tiny Event 1.01 - print Option SQL Injection

XOOPS Tiny Event 1.01 - print Option SQL Injection source: https://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

XOOPS Tiny Event 1.01 - 'print' Option SQL Injection

source: https://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Debian Security Advisory DSA 985-1 (libtasn1-2)

The remote host is missing an update to libtasn1-2 announced via advisory DSA 985-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library that allows attackers to crash the DER decoder and possibly execute arbitrary code...

Debian Security Advisory DSA 986-1 (gnutls11)

The remote host is missing an update to gnutls11 announced via advisory DSA 986-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library, which is also present and used in GnuTLS, the GNU implementation for Transport Laye...

Debian: Security Advisory (DSA-986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-5421

Rejected reason: Multiple stack-based buffer overflows in Cisco IOS 12.x and IOS XR allow attackers to execute arbitrary code, as demonstrated via the "Bind Shell", "Reverse Shell", and "Two byte rootshell Tiny Shell" attacks. NOTE: the vendor and researcher agree that this issue does not cross...

win32 Tiny Download and Exec Shellcode 192 bytes

Exploit for win32 platform in category shellcode ================================================ win32 Tiny Download and Exec Shellcode 192 bytes ================================================ ;Tiny Download&&Exec ShellCode codz czy 2007.6.1 ;header 163=6116+8+9+28+9568+27+17 ;163+19=192 comme...

CVE-2007-1811

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-1811

The vulnerability described as CVE-2007-1811 affects the Tiny Event module for XOOPS (version 1.01 and earlier). It is a SQL injection in index.php where the id parameter used by the show action allows remote attackers to execute arbitrary SQL commands. This is the confirmed root cause: improper ...

CVE-2007-1811

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-1811: Undefined Security Weakness

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

XOOPS Module Tiny Event <= 1.01 (id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Tiny Event = 1.01 id Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/tinyevent/ S.Page : http://www.chapi.de/ $$ : ?? .. : ajann,Turkey use IO::Socket; if@ARGV 1 print ...

XOOPS Module Tiny Event 1.01 - id SQL Injection

XOOPS Module Tiny Event 1.01 - id SQL Injection !/usr/bin/perl Script Name: XOOPS Module Tiny Event : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id;...