XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit =========================================================== XOOPS Module icontent v.1.0 Remote File Inclusion Exploit...

XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Module icontent 1.04.5 - Remote File Inclusion

XOOPS Module icontent 1.04.5 - Remote File Inclusion XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

XOOPS Module icontent 1.0/4.5 - Remote File Inclusion

XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

CVE-2007-2737

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

Sql injection

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

CVE-2007-2735

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

Sql injection

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2735

CVE-2007-2735 is an SQL injection vulnerability affecting the ResManager 1.2.1 and earlier module for XOOPS. The issue allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter in edit_day.php. CVSSv2 base score 7.5 (HIGH) with network attack vector, no authentication,...

CVE-2007-2737

Summary (CVE-2007-2737) : The XOOPS MyConference 1.0 module contains an SQL injection in index.php exploitable via the cid parameter. The issue allows a remote attacker to execute arbitrary SQL commands against the underlying database. This is reported in multiple sources (NVD entry and Checkpoin...

CVE-2007-2738

The CVE-2007-2738 entry corresponds to a SQL injection vulnerability in the Glossaire module for XOOPS (version 1.7 and earlier). The flaw resides in glossaire-p-f.php, where the sid parameter used in an ImprDef action is not properly sanitized, allowing remote attackers to execute arbitrary SQL ...

CVE-2007-2735

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

xoops17-sql.txt

!/usr/bin/perl Script Name: XOOPS Module Glossarie : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

xoops121-blindsql.txt

XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

xoops10-sql.txt

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

CVE-2007-2735: Undefined Security Weakness

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

CVE-2007-2737: Undefined Security Weakness

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...