CVE-2007-1960

The CVE-2007-1960 entry describes an SQL injection in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS (and possibly versions up to 1.10). The vulnerability occurs in visit.php via the lid parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected docum...

CVE-2007-1960

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2007-1962

CVE-2007-1962 is an SQL injection in the WF-Snippets 1.02 and earlier module for XOOPS. The vulnerability occurs in index.php via the c parameter in a cat action, enabling remote attackers to execute arbitrary SQL commands. Reported impact: partial confidentiality, integrity, and availability wit...

CVE-2007-1960: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter...

CVE-2007-1962: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...

xoopsjobs-sql.txt

!/usr/bin/perl Script Name: XOOPS Module Jobs : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

xoopswflinks-sql.txt

!/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module Jobs <= 2.4 (cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Jobs = 2.4 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/jobs/" S.Page : http://www.jlmzone.com/ $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

XOOPS Jobs Module index.php cid Parameter SQL Injection

The remote host is running the Jobs module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'cid' parameter of the 'modules/jobs/index.php' script before using it to build a database query. Regardless of...

XOOPS Module WF-Links 1.03 - cid SQL Injection

XOOPS Module WF-Links 1.03 - cid SQL Injection !/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $targe...

xoops-snippets-sql.txt

XOOPS Module WF-Snippets //'=============================================================================================== //'Script Name: XOOPS Module WF-Snippets = 1.02 c BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://www.xoops.org/ //'$$ :...

xoops-rha-sql.txt

!/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads 1.0 visit.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.rha7.com/ , www.xoops.org/modules/repository/singlefile.php?cid=92&lid=1525 $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV ...

XOOPS Module WF-Links 1.03 - 'cid' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module Jobs 2.4 - cid SQL Injection

XOOPS Module Jobs 2.4 - cid SQL Injection !/usr/bin/perl Script Name: XOOPS Module Jobs : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module WF-Links <= 1.03 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

XOOPS Module Jobs 2.4 - 'cid' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module Jobs : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module Jobs &lt;= 2.4 (cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Jobs = 2.4 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/jobs/" S.Page : http://www.jlmzone.com/ $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

XOOPS Module Jobs <= 2.4 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== XOOPS Module Jobs : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print...

Xoops Module PopnupBlog &lt;= 2.52 (postid) BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module PopnupBlog = 2.52 postid BLIND SQL Injection Exploit/title script type="text/javascript" //'=============================================================================================== //'Script Name: XOOPS Module PopnupBlog = 2.52...

XOOPS Module WF-Snippets <= 1.02 (c) BLIND SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module WF-Snippets XOOPS Module WF-Snippets //'=============================================================================================== //'Script Name: XOOPS...