CMS-Made-Simple-2.2.9-CVE-2019-9053

CMS-Made-Simple-2.2.9 - Exploit di SQL Injection - CVE-2019-9053 Descrizione Questo repository contiene un exploit per una vulnerabilità di SQL injection non autenticata in CMS Made Simple versioni 2.2.9 e precedenti. Questa vulnerabilità, identificata come CVE-2019-9053 , consente a un attaccant...

Spartan

Spartan Recon wie ein Profi Wiki • Verwendung • Galerie Funktionen Subdomain-Scan mit Aquatone & Sublist3r Httprob nur für Live-Seiten Masscan für offene Ports CMS-Identifikation mit CMSeeK URLs von waybackMachine abrufen Screenshots mit Aquatone Brute-Force von Verzeichnissen und Dateien mit...

CVE-2019-9053-POC

CMS Made Simple ⚠️ Avvertenza: Questo script è solo a scopo educativo e di test autorizzato. Non utilizzarlo su sistemi di cui non sei proprietario o per cui non hai esplicita autorizzazione. L'autore e i collaboratori non sono responsabili per eventuali abusi o danni causati da questo strumento. ...

CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Descrição sugerida RESERVED O JFinal CMS 5.1.0 é afetado por: Injeção SQL. Essas interfaces não usam o mesmo componente, nem possuem filtros, mas cada uma usa seu próprio método de concatenação SQL, resultando em injeção SQL. Informações adicionais...

CVE-2026-36358

CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） Per prima cosa, configura la piattaforma normalmente e registra un account. Qui, l'account amministratore che ho registrato è [email protected] / 123456. Dopo aver configurato la piattaforma, puoi vedere la homepage del sito web. Accedi a /admin...

CVE-2020-15906

CVE-2020-15906 CVE-2020-15906 的漏洞分析报告。 特别感谢 Frederic Mohr Lastbreach 提供的后端支持。 Tiki Wiki Cms Groupware 16.x - 21.1 认证绕过漏洞 —— Maximilian Barz 发现 我在 TikiWiki Cms Groupware 16.x - 21.1 中发现了一个新漏洞。该漏洞允许远程未经身份验证的攻击者绕过登录页面，从而完全控制 Tiki Wiki CMS。攻击者可以暴力破解管理员账户直至账户被锁定。此后，可以使用空密码以管理员身份进行身份验证并获取访问权限。...

CVE-2026-63179

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

WhatCMS

WhatCMS.sh CMS Erkennungs- und Exploit-Kit basierend auf der Whatcms.org API. Einleitung Whatcms.sh kann derzeit die Nutzung von mehr als 330 verschiedenen CMS -Applikationen und -Diensten erkennen und anschließend eine Liste von geeigneten Sicherheits-Audit-Tools für das erkannte CMS anzeigen. S...

JoomlaScan

فحص جوملا برنامج مجاني ومفتوح المصدر للعثور على المكونات المثبتة في نظام إدارة المحتوى جوملا، مبني من رماد Joomscan. الميزات مسح مواقع نظام إدارة المحتوى جوملا بحثًا عن المكونات/الإضافات قاعدة بيانات تضم أكثر من 600 مكون؛ تحديد المجلدات القابلة للتصفح للمكون Index of ...؛ تحديد المكونات المعطلة أ...

CMSeeK

Was ist ein CMS? Ein Content-Management-System CMS verwaltet die Erstellung und Bearbeitung digitaler Inhalte. Es unterstützt in der Regel mehrere Benutzer in einer kollaborativen Umgebung. Einige bemerkenswerte Beispiele sind: WordPress, Joomla, Drupal usw. Versionsgeschichte...

CVE-2026-63179

Winter CMS (a Laravel-based PHP content management system) versions up to and including 1.2.12 allow authenticated backend users to disclose arbitrary files readable by the PHP process. The root cause is that the LESS parser (via the wikimedia/less.php integration in Winter Storm) was instantiate...

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

grav-cve-2024-28116

CVE-2024-28116 — SSTI con Bypass della Sandbox in Grav CMS Analisi e riproduzione tramite Docker di CVE-2024-28116, una vulnerabilità di Server-Side Template Injection SSTI con bypass della sandbox di sicurezza nelle versioni di Grav CMS fino alla 1.7.44 inclusa, corretta nella versione 1.7.45...

angryFuzzer

AngryFuzz3r Status: Entwicklung Über das AngryFuzz3r-Projekt AngryFuzz3r ist eine Sammlung von Tools für Pentesting, um Informationen zu sammeln und Schwachstellen der Ziele basierend auf dem Fuzzedb-Projekt https://github.com/fuzzdb-project/fuzzdb zu entdecken. UrlFuzz3r-AngryFuzz3r1 Entdecken S...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

wig

wig - वेबएप सूचना संग्राहक wig एक वेब एप्लीकेशन सूचना संग्रह उपकरण है, जो अनेक सामग्री प्रबंधन प्रणालियों सीएमएस और अन्य प्रशासनिक अनुप्रयोगों की पहचान कर सकता है। एप्लीकेशन फिंगरप्रिंटिंग सीएमएस के विभिन्न संस्करणों के लिए ज्ञात फ़ाइलों के चेकसम और स्ट्रिंग मिलान पर आधारित है। इसके परिणामस्वरूप...

CVE-2026-54256

Winter CMS (v1.2.12 and earlier) contains an Insecure Direct Object Reference (IDOR) in the backend FileUpload form widget. The widget's getFileRecord() resolved a user-supplied file_id POST parameter against the global system_files table without scoping to the widget's own relation or parent rec...

CVE-2026-32639

Winter CMS (a content management system built on Laravel) contained a broken access control flaw in its CMS Theme Editor AJAX handlers (Cms\Controllers\Index). The controller used OR-logic across five permissions to gate section access, but individual handlers like onSave(), onDelete(), and onDel...

CVE-2026-32593

Winter CMS (Laravel-based PHP CMS) versions up to 1.2.12 are vulnerable to SQL injection in the backend Filter widget (Backend\Widgets\Filter) when the numberrange scope type is configured with a conditions key. Filter values are interpolated into the conditions statement without parameter bindin...

CVE-2026-32593 Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter widget is vulnerable to SQL injection through the numberrange scope type when that scope is configured with a conditions key, allowing an authenticated backend...