CVE-2007-1807

CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...

CVE-2007-1813

CVE-2007-1813 describes an SQL injection vulnerability in the display.php component of the eCal 2.24 and earlier module for Xoops . The vulnerability is triggered via the katid parameter, allowing a remote attacker to execute arbitrary SQL commands. The affected entry does not specify an exploit ...

CVE-2007-1808

The CVE-2007-1808 vulnerability affects the Camportail 1.1 and earlier module for XOOPS. The issue is an SQL injection in show.php, exploitable via the camid parameter in a showcam action, allowing remote attackers to execute arbitrary SQL commands. The provided sources confirm the affected compo...

CVE-2007-1806

CVE-2007-1806 affects the RM+Soft Gallery (rmgallery) 1.0 module for Xoops. The vulnerability is an SQL injection in categos.php, exploitable via the idcat parameter, allowing remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD entry for CVE-2007-18...

CVE-2007-1810

SQL injection vulnerability in productdetails.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1811

The vulnerability described as CVE-2007-1811 affects the Tiny Event module for XOOPS (version 1.01 and earlier). It is a SQL injection in index.php where the id parameter used by the show action allows remote attackers to execute arbitrary SQL commands. This is the confirmed root cause: improper ...

CVE-2007-1807

SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1816

CVE-2007-1816 describes an SQL injection in the XOOPS module Tutoriais , specifically in viewcat.php . The vulnerability is triggered through the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/sanitization of the cid parameter...

CVE-2007-1805

CVE-2007-1805 is an SQL injection in the Myxoops Debaser module (version 0.92 and earlier) for XOOPS. The vulnerability allows remote attackers to execute arbitrary SQL commands via the genreid parameter in genre.php. The connected records confirm the affected component and the underlying cause (...

CVE-2007-1816

SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1815

SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2007-1805

SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter...

CVE-2007-1810

CVE-2007-1810 is a SQL injection vulnerability in the Kshop 1.17 and earlier module for Xoops. The flaw affects product_details.php where the id parameter can be manipulated to execute arbitrary SQL commands on the database by remote attackers. The NVD entry lists a high impact (CVSS v2 base scor...

CVE-2007-1813

SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the katid parameter...

CVE-2007-1817

SQL injection vulnerability in index.php in the Lykos Reviews lykosreviews 1.00 module for Xoops allows remote attackers to execute arbitrary SQL commands via the uid parameter in a u action...

CVE-2007-1817

The CVE-2007-1817 issue affects the Lykos Reviews (lykos_reviews) XOOPS module, version 1.00. The vulnerability is an SQL injection in index.php triggered by the uid parameter in a u action, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected ...

CVE-2007-1815

The CVE-2007-1815 issue affects the XOOPS Library Module (Library, viewcat.php) where the cid parameter is vulnerable to SQL injection. The underlying flaw allows remote attackers to craft input that alters SQL queries and may lead to arbitrary SQL execution. This is confirmed by multiple sources...

CVE-2007-1806

SQL injection vulnerability in categos.php in the RM+Soft Gallery rmgallery 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

Xoops Module Lykos Reviews 1.00 (index.php) SQL Injection Exploit

No description provided by source. html head titleXOOPS Module Lykos Reviews 1.00 index.php BLIND SQL Injection Exploit/title script type="text/javascript" //'=============================================================================================== //'Script Name: XOOPS Module Lykos Reviews...

XOOPS Module XFsection <= 1.07 (articleid) BLIND SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== XOOPS Module XFsection XOOPS Module XFsection //'=============================================================================================== //'Script Name: XOOPS...