XOOPS Module wflinks SQL Injection(cid)

XOOPS Module wflinks SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: modules/wflinks/viewcat.php DORK 2 : allinurl: modules/wflinks example http://xxxxxx.com/modules/wflinks/viewcat.php?cid= exploit EXPLOIT :...

Cross site scripting

Cross-site scripting XSS vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter...

Sql injection

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2008-0684: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbitrary web script or HTML via the CatID parameter...

CVE-2008-0684

CVE-2008-0684 documents a cross-site scripting (XSS) vulnerability in ViewCat.php of iTechClassifieds 3.0, exploitable via the CatID parameter to inject arbitrary web script/HTML. The root cause is lack of proper input validation/sanitization in Category ID handling, allowing attacker-supplied in...

CVE-2008-0685

The CVE-2008-0685 entry concerns a SQL injection in ViewCat.php of iTechClassifieds 3.0, exploitable via the CatID parameter to yield arbitrary SQL commands on the backend. Affected component is the ViewCat.php code path in iTechClassifieds 3.0, with the underlying issue being improper handling o...

CVE-2008-0685: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

ITech Classifieds Multiple Remote Vulnerabilities

Title : ITech Classifieds Multiple Remote Vulnerabilities Author : CrackersChild Bug : SQL Injection + XSS Demo : http://itechclassifieds.com/demo/ Exp : /ViewCat.php?CatID=scriptAlertdocument.cookie/script Exp : /ViewCat.php?CatID=SQL Injection / Greetz : www.aq.com www.sibersavascilar.com...

Sql injection

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...

CVE-2007-3354: Undefined Security Weakness

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-2373: Undefined Security Weakness

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1847

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1847

CVE-2007-1847 is an SQL injection vulnerability in the Xoops Repository Module, specifically its viewcat.php handling of the cid parameter. The root cause is improper input handling in the Repository module, allowing remote attackers to inject and execute arbitrary SQL commands. Public references...

CVE-2007-1847: Undefined Security Weakness

SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1815

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1814

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...

CVE-2007-1816

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1816

CVE-2007-1816 describes an SQL injection in the XOOPS module Tutoriais , specifically in viewcat.php . The vulnerability is triggered through the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/sanitization of the cid parameter...