CVE-2007-2370

SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a jobsview action. NOTE: the module name was originally reported as Job Listings...

CVE-2007-2373

The provided connected documents confirm a concrete vulnerability: WF-Links (wflinks) module for XOOPS, version 1.03 and earlier, contains an SQL injection in viewcat.php. The flaw allows remote attackers to manipulate the cid parameter to execute arbitrary SQL commands on the backend. The affect...

CVE-2007-2370

CVE-2007-2370 : Concrete details across connected documents show a SQL injection in the XOOPS Jobs module (John Mordo Jobs) for XOOPS, affecting version 2.4 and earlier. The vulnerability resides in index.php (modules/jobs/index.php) where user input in the cid parameter of a jobsview action is n...

CVE-2007-2373

SQL injection vulnerability in viewcat.php in the WF-Links wflinks 1.03 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2007-2107

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2007-2107

SQL injection vulnerability in visit.php in the Rha7 Downloads rha7downloads 1.0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2007-1960. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2007-2107

CVE-2007-2107 describes an SQL injection in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, triggered via the cid parameter in visit.php. The vulnerability arises from processing user-supplied input without proper sanitization, allowing remote attackers to potentially modify or exfiltrat...

XOOPS TeamSpeak Display TSDisplay4xoops_block2.PHP远程文件包含漏洞

XOOPS TeamSpeak Display是一款基于PHP的WEB应用程序。 XOOPS TeamSpeak Display不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'tsdisplay4xoopsblock2.php'脚本对用户提交的'xoopsurl'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 tsdisplay4xoops tsdisplay4xoops 0.1 tsdisplay4xoops tsdisplay4xoops 0.08 目前没有解决方案提供：...

XOOPS Module tsdisplay4xoops 0.1 Remote File Inclusion Vulnerability

No description provided by source. tsdisplay4xoops 0.1xoopsurlRemote File Include Vulnerabilitiy D.Script: http://kisskool30.free.fr/tsdisplay4xoopsv0.08.zip Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc...

xoops module tsdisplay4xoops 0.1 - Remote File Inclusion

xoops module tsdisplay4xoops 0.1 - Remote File Inclusion tsdisplay4xoops 0.1xoopsurlRemote File Include Vulnerabilitiy D.Script: http://kisskool30.free.fr/tsdisplay4xoopsv0.08.zip Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc...

XOOPS Module tsdisplay4xoops 0.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== XOOPS Module tsdisplay4xoops 0.1 Remote File Inclusion Vulnerability ==================================================================== tsdisplay4xoops 0.1xoopsurlRemot...

xoops module tsdisplay4xoops 0.1 - Remote File Inclusion

tsdisplay4xoops 0.1xoopsurlRemote File Include Vulnerabilitiy D.Script: http://kisskool30.free.fr/tsdisplay4xoopsv0.08.zip Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/modules/tsdisplay4xoops/blocks/tsdisplay4xoopsblock2.php?xoopsurl=Shell Greetz To: Tryag.Com/...

XOOPS Rha7 Downloads Module Visit.PHP SQL注入漏洞

XOOPS Rha7 Downloads是一款基于PHP的WEB应用程序。 XOOPS Rha7 Downloads不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Visit.PHP'脚本对用户提交的'postid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Xoops Rha7 Downloads Module 1.0 目前没有解决方案提供： http://www.xoops.org/ !/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads...

Sql injection

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the getblogidfrompostid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and...

CVE-2007-1979

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the getblogidfrompostid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and...

CVE-2007-1979

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the getblogidfrompostid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and...

CVE-2007-1979

CVE-2007-1979 refers to an SQL injection in the PopnupBlog module for XOOPS (index.php) up to version 2.52 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the postid parameter, potentially involving get_blogid_from_postid in class/PopnupBlogUtils.php. ...

CVE-2007-1979

SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the getblogidfrompostid function in class/PopnupBlogUtils.php. NOTE: later versions such as 3.03 and...

CVE-2007-1976

PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfigrootpath parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application'...