XOOPS Module icontent 1.0 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Multiple Modules spaw_control.class.php spaw_root Parameter Remote File Inclusion

The remote host is running a third-party module for XOOPS. The version of at least one such module installed on the remote host includes a copy of the SPAW PHP WYSIWYG editor control that fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spawcontrol.class.php' script befor...

XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit =========================================================== XOOPS Module icontent v.1.0 Remote File Inclusion Exploit...

XOOPS Module icontent 1.04.5 - Remote File Inclusion

XOOPS Module icontent 1.04.5 - Remote File Inclusion XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Module icontent 1.0/4.5 - Remote File Inclusion

XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

CVE-2007-2735

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

Sql injection

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2737

SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

Sql injection

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

Sql injection

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

CVE-2007-2735

SQL injection vulnerability in editday.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the idreserv parameter...

CVE-2007-2737

Summary (CVE-2007-2737) : The XOOPS MyConference 1.0 module contains an SQL injection in index.php exploitable via the cid parameter. The issue allows a remote attacker to execute arbitrary SQL commands against the underlying database. This is reported in multiple sources (NVD entry and Checkpoin...

CVE-2007-2738

The CVE-2007-2738 entry corresponds to a SQL injection vulnerability in the Glossaire module for XOOPS (version 1.7 and earlier). The flaw resides in glossaire-p-f.php, where the sid parameter used in an ImprDef action is not properly sanitized, allowing remote attackers to execute arbitrary SQL ...

CVE-2007-2735

CVE-2007-2735 is an SQL injection vulnerability affecting the ResManager 1.2.1 and earlier module for XOOPS. The issue allows remote attackers to execute arbitrary SQL commands via the id_reserv parameter in edit_day.php. CVSSv2 base score 7.5 (HIGH) with network attack vector, no authentication,...

CVE-2007-2738

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...

xoops121-blindsql.txt

XOOPS Module resmanager //'=============================================================================================== //'Script Name: XOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page :...

xoops10-sql.txt

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

CVE-2007-2738: Undefined Security Weakness

SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action...