CVE-2007-1816

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1815

The CVE-2007-1815 issue affects the XOOPS Library Module (Library, viewcat.php) where the cid parameter is vulnerable to SQL injection. The underlying flaw allows remote attackers to craft input that alters SQL queries and may lead to arbitrary SQL execution. This is confirmed by multiple sources...

CVE-2007-1817

SQL injection vulnerability in index.php in the Lykos Reviews lykosreviews 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action...

CVE-2007-1813

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter...

CVE-2007-1815

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1805

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter...

CVE-2007-1806

SQL injection vulnerability in categos.php in the RM+Soft Gallery rmgallery 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

CVE-2007-1817

The CVE-2007-1817 issue affects the Lykos Reviews (lykos_reviews) XOOPS module, version 1.00. The vulnerability is an SQL injection in index.php triggered by the uid parameter in a u action, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected ...

CVE-2007-1810

CVE-2007-1810 is a SQL injection vulnerability in the Kshop 1.17 and earlier module for Xoops. The flaw affects product_details.php where the id parameter can be manipulated to execute arbitrary SQL commands on the database by remote attackers. The NVD entry lists a high impact (CVSS v2 base scor...

XOOPS Module Zmagazine 1.0 (print.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Zmagazine 1.0 print.php Remote SQL Injection Exploit =================================================================== !/usr/bin/perl Script Name: XOOPS...

Xoops Module Tutoriais (viewcat.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Tutoriais viewcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://xoops.pr.gov.br/ $$ : ?? . : Tested on xoops.pr.gov.br .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...

Xoops Module Camportail <= 1.1 (camid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Camportail = 1.1 camid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/camportail/ S.Page : http://123rando.com/ $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV 1...

XOOPS Module WF-Section <= 1.01 (articleid) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= XOOPS Module WF-Section : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

XOOPS Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== XOOPS Module XFsection XOOPS Module XFsection //'=============================================================================================== //'Script Name: XOOPS...

Xoops Module debaser <= 0.92 (genre.php) BLIND SQL Injection Exploit

No description provided by source. XOOPS Module debaser //'=============================================================================================== //'Script Name: XOOPS Module debaser = 0.92genre.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : :...

XOOPS Module WF-Section 1.01 - articleId SQL Injection

XOOPS Module WF-Section 1.01 - articleId SQL Injection !/usr/bin/perl Script Name: XOOPS Module WF-Section : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop...

Xoops Module Lykos Reviews 1.00 (index.php) SQL Injection Exploit

No description provided by source. html head titleXOOPS Module Lykos Reviews 1.00 index.php BLIND SQL Injection Exploit/title script type="text/javascript" //'=============================================================================================== //'Script Name: XOOPS Module Lykos Reviews...

Xoops Module Kshop <= 1.17 (id) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Kshop = 1.17 id Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/kshop/ S.Page : http://www.kaotik.biz/ $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

Xoops Module eCal <= 2.24 (display.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module eCal 2.24 = display.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.inconnueteam.net/ $$ : ?? .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

XOOPS Module WF-Section 1.01 - 'articleId' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module WF-Section : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...