CVE-2007-2735

CVE-2007-2735 is an SQL injection vulnerability affecting the ResManager 1.2.1 and earlier module for XOOPS. The issue allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter in edit_day.php. CVSSv2 base score 7.5 (HIGH) with network attack vector, no authentication,...

CVE-2007-2738

The CVE-2007-2738 entry corresponds to a SQL injection vulnerability in the Glossaire module for XOOPS (version 1.7 and earlier). The flaw resides in glossaire-p-f.php, where the sid parameter used in an ImprDef action is not properly sanitized, allowing remote attackers to execute arbitrary SQL ...

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

xoops121-blindsql.txt

XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

xoops10-sql.txt

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

xoops17-sql.txt

!/usr/bin/perl Script Name: XOOPS Module Glossarie : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module resmanager <= 1.21 BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type="text/javascript" //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...

XOOPS Module Glossarie <= 1.7 (sid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Glossarie = 1.7 sid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/glossaire/" S.Page : http://www.xoops.org/modules/repository/singlefile.php?cid=100&lid=1156 $$ :...

XOOPS Module MyConference 1.0 (index.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free...

XOOPS Module Glossarie 1.7 - sid SQL Injection

XOOPS Module Glossarie 1.7 - sid SQL Injection !/usr/bin/perl Script Name: XOOPS Module Glossarie : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id;...

XOOPS Module resmanager 1.21 - Blind SQL Injection

XOOPS Module resmanager 1.21 - Blind SQL Injection XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajan...

XOOPS Module MyConference 1.0 (index.php) SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== XOOPS Module MyConference 1.0 index.php SQL Injection Exploit =============================================================== !/usr/bin/perl Script Name: XOOPS Module...

XOOPS Module MyConference 1.0 - 'index.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

XOOPS Module resmanager <= 1.21 BLIND SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== XOOPS Module resmanager XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module...

XOOPS Module resmanager 1.21 - Blind SQL Injection

XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

XOOPS Module Glossarie <= 1.7 (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module Glossarie : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...

XOOPS Module MyConference 1.0 - index.php SQL Injection

XOOPS Module MyConference 1.0 - index.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page :...

XOOPS Module Glossarie 1.7 - 'sid' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module Glossarie : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

CVE-2007-2571

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...

Sql injection

SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action...