1341 matches found
Sql injection
SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter...
CVE-2007-1808
SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action...
CVE-2007-1810
SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-1815
SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1814
SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...
CVE-2007-1813
SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter...
Sql injection
SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
CVE-2007-1814
CVE-2007-1814 affects Xoops 2.0.16 core (and related components) with SQL injection vulnerabilities. The vulnerability is triggered in core/viewcat.php via the cid parameter (as per CVE-2007-1814 description) and connected documents also reference additional vectors including the id parameter in ...
CVE-2007-1807
CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...
CVE-2007-1808
The CVE-2007-1808 vulnerability affects the Camportail 1.1 and earlier module for XOOPS. The issue is an SQL injection in show.php, exploitable via the camid parameter in a showcam action, allowing remote attackers to execute arbitrary SQL commands. The provided sources confirm the affected compo...
CVE-2007-1806
CVE-2007-1806 affects the RM+Soft Gallery (rmgallery) 1.0 module for Xoops. The vulnerability is an SQL injection in categos.php, exploitable via the idcat parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD entry for CVE-2007-18...
CVE-2007-1814
SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-0377...
CVE-2007-1811
SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...
CVE-2007-1813
CVE-2007-1813 describes an SQL injection vulnerability in the display.php component of the eCal 2.24 and earlier module for Xoops . The vulnerability is triggered via the katid parameter, allowing a remote attacker to execute arbitrary SQL commands. The affected entry does not specify an exploit ...
CVE-2007-1808
SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the camid parameter in a showcam action...
CVE-2007-1805
CVE-2007-1805 is an SQL injection in the Myxoops Debaser module (version 0.92 and earlier) for XOOPS. The vulnerability allows remote attackers to execute arbitrary SQL commands via the genreid parameter in genre.php. The connected records confirm the affected component and the underlying cause (...
CVE-2007-1811
The vulnerability described as CVE-2007-1811 affects the Tiny Event module for XOOPS (version 1.01 and earlier). It is a SQL injection in index.php where the id parameter used by the show action allows remote attackers to execute arbitrary SQL commands. This is the confirmed root cause: improper ...
CVE-2007-1816
CVE-2007-1816 describes an SQL injection in the XOOPS module Tutoriais , specifically in viewcat.php . The vulnerability is triggered through the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/sanitization of the cid parameter...