XOOPS Tiny Event 1.01 - 'print' Option SQL Injection

source: https://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

xoops2016-rfi.txt

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

CVE-2008-0847

The vulnerability is a SQL injection in the print.php of XOOPS the myTopics module, exploited via the articleid parameter. Affected component: print.php in the myTopics module for XOOPS. Root cause: unsanitized input leading to arbitrary SQL execution. Impact: remote attacker could interfere with...

XOOPS Tiny Event 1.01 - print Option SQL Injection

XOOPS Tiny Event 1.01 - print Option SQL Injection source: https://www.securityfocus.com/bid/27931/info Tiny Event is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

CVE-2008-0847

SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

XOOPS 'prayerlist' Module - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/27934/info XOOPS 'prayerlist' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acce...

xoopsmodule-sql.txt

XOOPS Module section SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: modules/wfsection/print.php?articleid= EXPLOIT :...

XOOPS Module classifieds (cid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example...

xoopsclassifieds-sql.txt

XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example http://xxxx/modules/classifieds/index.php?pa=Adsview&cid=exploit EXPLOIT :...

XOOPS Module myTopics-print SQL Injection(articleid)

XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics example /modules/myTopics/ exploit EXPLOIT :...

XOOPS Module myTopics (articleid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics EXPLOIT :...

XOOPS Module seminars SQL Injection

XOOPS Module seminars SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl :"modules/seminars/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

XOOPS Module section SQL Injection(articleid)

XOOPS Module section SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: modules/wfsection/print.php?articleid= EXPLOIT :...

xoopsseminars-sql.txt

XOOPS Module seminars SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"modules/seminars/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

XOOPS Module classifieds SQL Injection(cid)

XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example http://xxxx/modules/classifieds/index.php?pa=Adsview&cid=exploit EXPLOIT :...

XOOPS Module eEmpregos (cid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module eEmpregos SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: "modules/eEmpregos/index.php" DORK 2 : allinurl: cid "modules/eEmpregos" example...

xoopsevents-sql.txt

XOOPS Module events SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"modules/events/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

XOOPS Module wflinks SQL Injection(cid)

XOOPS Module wflinks SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: modules/wflinks/viewcat.php DORK 2 : allinurl: modules/wflinks example http://xxxxxx.com/modules/wflinks/viewcat.php?cid= exploit EXPLOIT :...

xoopseempregos-sql.txt

XOOPS Module eEmpregos SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules/eEmpregos/index.php" DORK 2 : allinurl: cid "modules/eEmpregos" example http://xxxx/modules/eEmpregos/index.php?pa=view&cid=explo...

XOOPS Module badliege SQL Injection

XOOPS Module badliege SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl :"modules/badliege/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...