123 matches found
CVE-2008-1351
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php...
CVE-2008-1351
CVE-2008-1351 describes an SQL injection in the XOOPS Tutorials 2.1b module. The vulnerable entry point is printpage.php, where the tid parameter can be exploited to execute arbitrary SQL commands, reachable directly or via a printpage action to index.php. The associated references (Exploit-DB, S...
CVE-2008-1351
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php...
CVE-2008-1351: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid parameter to printpage.php, which is accessible directly or through a printpage action to index.php...
XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability
No description provided by source. AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORKS 1 : allinurl :"/modules/tutorials/" DORK 2 : allinurl :"/modules/tutorials/"tid EXPLOIT 1 :...
XOOPS Module tutorials 2.1b - printpage.php SQL Injection
XOOPS Module tutorials 2.1b - printpage.php SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"/modules/tutorials/" DORK 2 : allinurl :"/modules/tutorials/"tid EXPLOIT 1 :...
XOOPS Module tutorials 2.1b - 'printpage.php' SQL Injection
AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"/modules/tutorials/" DORK 2 : allinurl :"/modules/tutorials/"tid EXPLOIT 1 :...
XOOPS Module tutorials (printpage.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== XOOPS Module tutorials printpage.php SQL Injection Vulnerability ================================================================== DORKS 1 : allinurl :"/modules/tutorials/...
Learn2 STRunner ActiveX Control Multiple Buffer Overflow Vulnerabilities
The Learn2 Corporation's STRunner ActiveX control, used with various online tutorials, is installed on the remote host. It reportedly is affected by multiple and as-yet unspecified stack-based buffer overflows. If a remote attacker can trick a user on the affected host into visiting a specially...
CVE-2008-0254
SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...
CVE-2007-2600
CVE-2007-2600 involves multiple reflected XSS vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via: (1) the catFile parameter to browseCat.php or browseSubCat.php; (2) the id parameter to openTutori...
CVE-2007-2599
TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier contains multiple SQL injection vulnerabilities. The affected components include (1) catFile parameter for browseCat.php and browseSubCat.php, (2) id parameter for openTutorial.php, topFrame.php, and admin/editListing.php, and (3) the search ...
CVE-2007-2600: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in TutorialCMS aka Photoshop Tutorials 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 catFile parameter to a browseCat.php or b browseSubCat.php; the 2 id parameter to c openTutorial.php, d topFrame.php, o...
CVE-2005-3478
SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3478
SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3478
CVE-2005-3478 is a SQL injection flaw in PHPCafe.net Tutorials Manager 1.0 Beta 2, exploitable via the id parameter in index.php. The vulnerability enables remote SQL command execution. CVSS v2 metrics from NVD indicate a base score of 7.5 (HIGH) with network attack vector, low attack complexity,...
CVE-2005-3478: Undefined Security Weakness
SQL injection vulnerability in index.php in PHPCafe.net Tutorials Manager 1.0 Beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
SYS component of the whole hand free kill Kabbah success-vulnerability warning-the black bar safety net
It is well known pcshare of the drive stage Assembly pchide. sys has been difficult to locate,difficult to modify and famous After two weeks of trying,I finally will be this challenge to overcome! Technical information can disclose some,first select the object is the card bar Kabbah adopted a...
CVE-2003-0491
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file...
CVE-2003-0491
The CVE-2003-0491 entry affects the Tutorials 2.0 module in XOOPS and E-XOOPS. It describes a remote code execution via uploading a PHP file without an image MIME type, then directly accessing the uploaded file. This is the stated vulnerability path and impact; no remediation details are provided...