Xoops Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit

No description provided by source. XOOPS Module XFsection //'=============================================================================================== //'Script Name: XOOPS Module XFsection = 1.07 articleid BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : :...

CVE-2007-1838

CVE-2007-1838 describes an SQL injection in the Friendfinder module for XOOPS (version 3.3 and earlier) . The vulnerability affects the view.php component, where an attacker can manipulate the id parameter to execute arbitrary SQL commands on the back-end database. The provided documents confirm ...

xoopszmag-sql.txt

!/usr/bin/perl Script Name: XOOPS Module Zmagazine 1.0 print.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/zmagazine/" Result:20.800 Example S. : http://www.google.com.tr/search?q=inurl:/modules/zmagazine/&hl=tr&start=0&sa=N S.Page :...

Xoops Module Zmagazine 1.0 (print.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Zmagazine 1.0 print.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/zmagazine/" Result:20.800 Example S. :...

xoopsxfsec-sql.txt

XOOPS Module XFsection //'=============================================================================================== //'Script Name: XOOPS Module XFsection = 1.07 articleid BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'Dork : inurl:/modules/xfsection/...

CVE-2007-1838

SQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

Xoops Module WF-Section <= 1.01 (articleid) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module WF-Section = 1.01 articleid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/wfsection/" Result:808.000 Example S. :...

CVE-2007-1816

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1806

SQL injection vulnerability in categos.php in the RM+Soft Gallery rmgallery 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

Sql injection

SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...

Sql injection

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action...

Sql injection

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in the Lykos Reviews lykosreviews 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action...

CVE-2007-1807

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1817

SQL injection vulnerability in index.php in the Lykos Reviews lykosreviews 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action...

Sql injection

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1805

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter...

CVE-2007-1811

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter...