joomlabrightcode-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component Brightcode Weblinks Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:combrightweblinks POC :...

Sql injection

SQL injection vulnerability in Brightcode Weblinks combrightweblinks component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3083

SQL injection vulnerability in Brightcode Weblinks combrightweblinks component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-3083

CVE-2008-3083 is a SQL injection vulnerability in Joomla! component Brightcode Weblinks (com_brightweblinks). The issue allows remote attackers to execute arbitrary SQL commands via the catid parameter. NVD lists a base score of 7.5 (HIGH) with network attack vector and no authentication required...

CVE-2008-3083

SQL injection vulnerability in Brightcode Weblinks combrightweblinks component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Joomla! Component Brightcode Weblinks - catid SQL Injection

Joomla! Component Brightcode Weblinks - catid SQL Injection /---------------------------------------------------------------\ \ / / Joomla Component Brightcode Weblinks Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork...

Joomla! Component Brightcode Weblinks - 'catid' SQL Injection

/---------------------------------------------------------------\ \ / / Joomla Component Brightcode Weblinks Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:combrightweblinks POC :...

Cross site scripting

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5598

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-5598

CVE-2007-5598 affects the Weblinks module for Drupal, specifically versions 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8. The vulnerability is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents c...

CVE-2007-5598

Cross-site scripting XSS vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-2007-028 - Weblinks - Cross site scripting

User input is not properly sanitized on a number of pages. This allows malicious users to inject arbitrary HTML and script code into these pages, which may lead to administrator access if certain conditions are met. Learn more about cross site scripting on Wikipedia. Versions affected Weblinks fo...

Sql injection bugs in Xoops 2.0.16 + Weblinks module

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE-2007-0377. There is a sql injection bug in Xoops 2.0.16 core and maybe other versions in admin section: The 'id' parameter in "get" function is not checked against sql injections : File kernel/group.php, Line 94 : :: function...

CVE-2007-0377

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...

Sql injection

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...

CVE-2007-0387

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0377

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...

CVE-2007-0387

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via 1 the active parameter in admin/modules/modules.php; the 2 adclass, 3 imageurl, 4 clickurl, 5 adcode, or 6 position parameter in modules/Advertising/admin/index.php;...