CVE-2008-6884

CVE-2008-6884 describes multiple directory traversal vulnerabilities in XOOPS 2.3.1 where remote attackers can cause local file inclusion/execution by manipulating the xoopsConfig[language] parameter. The issue affects blocks.php and main.php inside xoops_lib/modules/protector/ and is tied to reg...

Xoops Celepar Module Qas (codigo) SQL Injection Vulnerability

No description provided by source. Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo =...

XOOPS Celepar Module Qas - Blind SQL Injection Cross-Site Scripting

XOOPS Celepar Module Qas - Blind SQL Injection Cross-Site Scripting -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NA...

XOOPS Celepar Module Qas (bSQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== XOOPS Celepar Module Qas bSQL/XSS Multiple Remote Vulnerabilities ===================================================================...

Xoops Celepar Quiz Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Xoops Celepar Qas Blind SQL Injection / XSS

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

XOOPS Celepar Module Qas - codigo SQL Injection

XOOPS Celepar Module Qas - codigo SQL Injection Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code:...

Xoops Celepar Qas SQL Injection

Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo = $POST'codigo'; else $codigo =...

Xoops Celepar Module Qas (codigo) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Xoops Celepar Module Qas codigo SQL Injection Vulnerability ============================================================= Xoops Celepar Module Qas Donwload of Xoops Celepar :...

XOOPS Celepar Module Qas - 'codigo' SQL Injection

Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code: $codigo = $POST'codigo'; else $codigo =...

XOOPS 2.3.3 - 'op' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities

XOOPS 2.3.3 - op Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35895/info XOOPS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2162

The CVE-2009-2162 entry affects XOOPS Maniac’s PukiWikiMod module (PukiWikiMod from XOOPS Maniac) for XOOPS, with the vulnerability present in version 1.6.6.2 and earlier. It is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script/HTML and execute it in a...

CVE-2009-2162

Cross-site scripting XSS vulnerability in the XOOPS MANIAC PukiWikiMod module 1.6.6.2 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#12244807 Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac

PukiWikiMod from XOOPS Maniac is a contents management software for XOOPS. PukiWikiMod contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to latest version according to the information provided b...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis -...

XOOPS 2.3.3 - .htaccess Remote File Disclosure

XOOPS 2.3.3 - .htaccess Remote File Disclosure ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De...

XOOPS 2.3.3 File Disclosure

======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis - daathatnibblesecdotorg Advisory...