CVE-2005-3680: Undefined Security Weakness

Directory traversal vulnerability in editorregistry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. dot dot in the xoopsConfiglanguage parameter...

XOOPS xoopsConfig[language] Parameter Local File Inclusion (XOOPS_WFd205_xpl)

The remote installation of XOOPS fails to sanitize user-supplied input to the 'xoopsConfiglanguage' parameter of several xoopseditor scripts before using it in PHP 'include' functions. An unauthenticated attacker may be able to leverage these issues to read arbitrary local files and even execute...

XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection

11.04 12/11/2005 1XOOPS 2.2.3 Final arbitrary local inclusion 2XOOPS WF-Downloads module v 2.05 SQL Injection / Administrative credentials disclousre / Remote commands execution software: site: http://www.xoops.org/ description: "XOOPS is an extensible, OO Object Oriented, easy to use dynamic web...

Xoops < 2.2.4 Multiple Vulnerabilities

Binary data 3293.prm...

XOOPS (wfdownloads) 2.05 Module Multiple Vulnerabilities Exploit

No description provided by source. ?php / rgod: http://target/pathtoxoops/class/xoopseditor/textarea/editorregistry.php?xoopsConfiglanguage=../../../../../../../../../../script...

XOOPS (wfdownloads) 2.05 Module - Multiple Vulnerabilities

XOOPS wfdownloads 2.05 Module - Multiple Vulnerabilities ?php / rgod: http://target/pathtoxoops/class/xoopseditor/textarea/editorregistry.php?xoopsConfiglanguage=../../../../../../../../../../script...

XOOPS (wfdownloads) 2.05 Module Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS wfdownloads 2.05 Module Multiple Vulnerabilities Exploit ================================================================ ?php / rgod:...

XOOPS (wfdownloads) 2.05 Module - Multiple Vulnerabilities

?php / rgod: http://target/pathtoxoops/class/xoopseditor/textarea/editorregistry.php?xoopsConfiglanguage=../../../../../../../../../../script http://target/pathtoxoops/class/xoopseditor/textarea/editorregistry.php?xoopsConfiglanguage=../../../../../../../../../../boot.ini%00...

XOOPS viewtopic.php Cross Site Scripting Vulnerability

The remote web server contains a PHP script that is prone to cross- site scripting attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

XOOPS 2.0.5.1 myheader.php URL XSS Vulnerability

XOOPS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops";...

CVE-2005-2338

Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...

CVE-2005-2338

Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...

CVE-2005-2338

XOOPS XSS vulnerabilities (CVE-2005-2338) affect XOOPS 2.0.12 JP and earlier, 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1. The issues enable remote attackers to inject arbitrary web script or HTML via (1) modules that use the XOOPS Code and (2) the newbb forum module. Root cause is cross-site...

CVE-2005-2338: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 modules that use "XOOPS Code" and 2 newbb in the forum module...

[SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities

---------------------------------------------------------------------- SNS Advisory No.85 XOOPS Multiple Cross-site Scripting Vulnerabilities Problem first discovered on: Sun, 25 Sep 2005 Published on: Tue, 25 Oct 2005 ---------------------------------------------------------------------- Severit...

JVN#77105349 XOOPS cross-site scripting vulnerability

Impact A remote attacker may upload a script to be executed by a user reading a private message or a forum article. This may allow a remote attacker to perform a session-hijacking and manipulate the screens after the user logs in. Solution Products Affected XOOPS 2.0.12 JP and earlier XOOPS...

Xoops 2.2.1 Full Path Disclosure

Xoops 2.2.1 Full Path Disclosure !!! http://target/include/registerform.php code Warning: mainXOOPSROOTPATH/class/xoopslists.php: failed to open stream: No such file or directory in /home/publichtml/site/include/registerform.php on line 28 Warning: main: Failed opening...

[SA16339] XOOPS PHPMailer and XML-RPC Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

pearxmlrpc.pl.txt

!/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research. http://pear.php.net/bugs/bug.php?id=4692 xmlrpc drupal exploit, but James sais xoops, phpnuke and other cms...

CVE-2005-2113

SQL injection vulnerability in the loginUser function in the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method...