Kasseler CMS 1.1.0/1.2.0 Lite Remote SQL Injection Vulnerabilities

No description provided by source. Kasseler CMS 1.1.0, 1.2.0 Lite SQL Injection Author: !DoktOR! Date found: 13.09.08 Product: Kasseler CMS Version: 1.1.0, 1.2.4 URL: www.kasseler-cms.net Vulnerability Class: SQL Injection...

drupal-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Date: Sept 12, 2008 Security risk: medium Exploitable from: Remote Vulnerability: Cross site scripting Description Drupal is a robust content management system CMS that provides extensibility through hundreds of third party modules. While the security...

K-Rate (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ K-Rate SQL/XSS Multiple Remote Vulnerabilities ================================================ ================================================================================ || K-Rate...

Directory traversal

Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to 1 includes/eventsapplicationtop.php; 2 english/account.php, 3 french/account.php, a...

CVE-2008-3575

PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgsLanguage parameter, a different vector than CVE-2006-4477 and CVE-2004-0132...

CVE-2008-3575: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgsLanguage parameter, a different vector than CVE-2006-4477 and CVE-2004-0132...

Design/Logic Flaw

Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."...

CVE-2008-3453: Undefined Security Weakness

Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."...

CVE-2008-3416: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrary SQL commands via the username parameter in a members action to index.php, related to an incorrect protection mechanism in the cleanstring function in includes/functions.php...

CVE-2008-3296: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3295: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web script or HTML via the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

/etc/pam.d/su is wrong in RHEL-4.6

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...

CVE-2008-3166: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

boonexdolphin-rfi.txt

Name Of Script : Dolphin PHP Version : 6.1.2 Download From : http://heanet.dl.sourceforge.net/sourceforge/boonex-dolphin/Dolphin-v.6.1.2-Free.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon & Tryag.cc/cc Member From Tryag Forum Type Of Exploit : RFI In...

Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities =================================================================== Name Of Script : Dolphin PHP Versio...

Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions

Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions Name Of Script : Dolphin PHP Version : 6.1.2 Download From : http://heanet.dl.sourceforge.net/sourceforge/boonex-dolphin/Dolphin-v.6.1.2-Free.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon &...

CVE-2008-2430: Undefined Security Weakness

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...

Improper access control

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions...

tomcat directory traversal

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules modproxy, modrewrite, modjk, allows remote attackers to read arbitrary files via a .. dot dot sequence with combinations of 1 "/" slash, 2 "" backslash, and...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...