EUVD-2007-0379

Malware in sbrugna...

xoops2016-rfi.txt

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

Sql injection bugs in Xoops 2.0.16 + Weblinks module

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE-2007-0377. There is a sql injection bug in Xoops 2.0.16 core and maybe other versions in admin section: The 'id' parameter in "get" function is not checked against sql injections : File kernel/group.php, Line 94 : :: function...

Sql injection

Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...