1341 matches found
XOOPS Module Friendfinder 3.3 - view.php?id SQL Injection
XOOPS Module Friendfinder 3.3 - view.php?id SQL Injection !/usr/bin/perl Script Name: Xoops Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ;...
XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== XOOPS Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR...
XOOPS module Articles <= 1.03 (index.php cat_id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Xoops module Articles = 1.02 index.php catid SQL Injection Exploit Coded by : ajann Author : ajann Dork : "inurl:modules/articles/index.php?catid=" Contact : : S.Page : http://www.xoops.org/ $$ : Free .. : ajann,Turkey PoC :...
Xoops module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles 1.03 - index.php?cat_id SQL Injection
XOOPS module Articles 1.03 - index.php?catid SQL Injection !/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop...
XOOPS module Articles 1.03 - 'index.php?cat_id' SQL Injection
!/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou...
XOOPS Module Friendfinder <= 3.3 (view.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Xoops Module Friendfinder = 3.3 view.php id BLIND SQL Injection Exploit Coded by : ajann Author : ajann Dork : "inurl:/modules/friendfinder/" Contact : : S.Page : http://www.xoops.org/ $$ : Free .. : ajann,Turkey use IO::Socket; if@AR...
XOOPS module Articles <= 1.03 (index.php cat_id) SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== XOOPS module Articles = 1.03 index.php catid SQL Injection Exploit ====================================================================== !/usr/bin/perl Script Name:...
XOOPS Module Friendfinder 3.3 - 'view.php?id' SQL Injection
!/usr/bin/perl Script Name: Xoops Module Friendfinder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...
XOOPS module Articles 1.02 - print.php?id SQL Injection
XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...
XOOPS Articles Module print.php id Parameter SQL Injection
The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/print.php' script before using it to build a database query...
Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC
Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : Xoops Portal http://www.Xoops.Org Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or 1=0 PoC :...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...
XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...
XOOPS module Articles 1.02 - 'print.php?id' SQL Injection
!/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or 1=0 PoC :...
PT-2007-1358 · Exv2 · Exv2
Name of the Vulnerable Software and Affected Versions: exV2 versions 2.0.4.3 and earlier Description: The issue allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code. This is achieved by modifying the xoopsOption'pagetyp...
Sql injection bugs in Xoops 2.0.16 + Weblinks module
Hi, These bugs were published in full-disclosure about 2 weeks ago CVE-2007-0377. There is a sql injection bug in Xoops 2.0.16 core and maybe other versions in admin section: The 'id' parameter in "get" function is not checked against sql injections : File kernel/group.php, Line 94 : :: function...
Sql injection
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...
CVE-2007-0377
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...
CVE-2007-0377
CVE-2007-0377 affects Xoops 2.0.16: core/kernel/group.php (id) and Weblinks/module/class/table_broken.php (lid) have unsanitized inputs leading to SQL injection. Remote attackers could potentially execute arbitrary SQL per the reported vectors. The provided documents do not specify a patch or mit...