1341 matches found
XOOPS 2.0.5.1 myheader.php URL XSS Vulnerability
XOOPS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops";...
CVE-2005-2338
Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...
CVE-2005-2338
XOOPS XSS vulnerabilities (CVE-2005-2338) affect XOOPS 2.0.12 JP and earlier, 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1. The issues enable remote attackers to inject arbitrary web script or HTML via (1) modules that use the XOOPS Code and (2) the newbb forum module. Root cause is cross-site...
CVE-2005-2338
Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...
[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
---------------------------------------------------------------------- SNS Advisory No.85 XOOPS Multiple Cross-site Scripting Vulnerabilities Problem first discovered on: Sun, 25 Sep 2005 Published on: Tue, 25 Oct 2005 ---------------------------------------------------------------------- Severit...
JVN#77105349 XOOPS cross-site scripting vulnerability
Impact A remote attacker may upload a script to be executed by a user reading a private message or a forum article. This may allow a remote attacker to perform a session-hijacking and manipulate the screens after the user logs in. Solution Products Affected XOOPS 2.0.12 JP and earlier XOOPS...
Xoops 2.2.1 Full Path Disclosure
Xoops 2.2.1 Full Path Disclosure !!! http://target/include/registerform.php code Warning: mainXOOPSROOTPATH/class/xoopslists.php: failed to open stream: No such file or directory in /home/publichtml/site/include/registerform.php on line 28 Warning: main: Failed opening...
[SA16339] XOOPS PHPMailer and XML-RPC Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
pearxmlrpc.pl.txt
!/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research. http://pear.php.net/bugs/bug.php?id=4692 xmlrpc drupal exploit, but James sais xoops, phpnuke and other cms...
CVE-2005-2113
SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method...
CVE-2005-2112
Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter to edit.php or 2 cid parameter to commentedit.php...
XOOPS Detection
The remote host is running XOOPS, a web content management system written in PHP and released under the GPL. Tenable Network Security, Inc. include"compat.inc"; if description scriptid18613; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...
XOOPS < 2.0.12 Multiple Vulnerabilities
The installed version of XOOPS on the remote host is affected by several vulnerabilities : - A SQL Injection Vulnerability The bundled XMLRPC server fails to sanitize user- supplied input to the 'xmlrpc.php' script. An attacker can exploit this flaw to launch SQL injection attacks, which could le...
XOOPS 2.0.11 - xmlrpc.php SQL Injection
XOOPS 2.0.11 - xmlrpc.php SQL Injection !/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else...
XOOPS 2.0.11 - 'xmlrpc.php' SQL Injection
!/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else $allchar .= chr$char; $snum++; su...
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Xoops = 2.0.11 xmlrpc.php sql injection exploit by RST/GHC based on http://www.gulftech.org/?node=research&articleid=00086-06292005 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru example: r57xoops.pl -u http://www.xoops2.ru/xmlrpc.php ...
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================ XOOPS 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar ----------------...
CVE-2005-2113
XOOPS <= 2.0.11 is affected by an SQL injection in the XMLRPC loginUser function that lets remote attackers execute arbitrary SQL and bypass authentication via crafted XML (e.g., blogger.getPost). The issue is documented as CVE-2005-2113; severity is HIGH (CVSS v2: AV:N/AC:L/Au:N/C:P/I:P/A:P)....
CVE-2005-2112
Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter to edit.php or 2 cid parameter to commentedit.php...