124 matches found
DEBIAN-CVE-2010-2480
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...
CVE-2010-2480
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting XSS protection, which makes it easier for remote attackers to conduct XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element...
PT-2010-4051 · Python · Mako
Name of the Vulnerable Software and Affected Versions: Mako versions prior to 0.3.4 Description: The issue makes it easier for remote attackers to conduct cross-site scripting XSS attacks via vectors involving single-quote characters and a JavaScript onLoad event handler for a BODY element. This ...
CVE-2008-5965
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. dot dot in the page parameter...
Bloofox CMS 0.3.4 Local File Inclusion
BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme= dialog.php?dialog=foo&module= - Seasons...
PT-2008-6798 · Bloofox · Bloofoxcms
Name of the Vulnerable Software and Affected Versions: BloofoxCMS version 0.3.4 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved via the lang, theme, and module parameters in the plugins/spaw2/dialogs/dialog.php file...
BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== BloofoxCMS 0.3.4 lang Local File Inclusion Vulnerability ========================================================== BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off...
Directory traversal
Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...
LokiCMS 0.3.4 writeconfig() Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================ LokiCMS 0.3.4 writeconfig Remote Command Execution Exploit ============================================================ Author: GiReX CMS: LokiCMS 0.3.4 URL:...
LokiCMS 0.3.4 - writeconfig() Remote Command Execution
LokiCMS 0.3.4 - writeconfig Remote Command Execution Author: GiReX Homepage: http://girex.altervista.org CMS: LokiCMS 0.3.4 URL: http://www.lokicms.com/ Description: LokiCMS is still vulnerable to Remote Command Execution see: http://milw0rm.com/exploits/5408 The exploit changed becouse the vars...
lokicms-lfi.txt
LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit url: http://www.lokicms.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsibl...
LokiCMS 0.3.4 - index.php Arbitrary Check File
LokiCMS 0.3.4 - index.php Arbitrary Check File LokiCMS = 0.3.4 index.php page Arbitrary Check File Exploit url: http://www.lokicms.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it ...
Quate CMS 0.3.4 (LFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Quate CMS 0.3.4 LFI/XSS Multiple Remote Vulnerabilities =========================================================...
LokiCMS admin.php文件绕过安全限制漏洞
BUGTRAQ ID: 29448 LokiCMS是一款简单易用的网络内容管理系统。 LokiCMS的admin.php文件中存在逻辑错误，如果远程攻击者在所提交的HTTP POST请求中设置了LokiACTION和其他参数的话，则无需管理权限就可以设置CMS main settings。 以下是有漏洞的代码段： admin.php Lines:24-42 if isset $POST && isset $POST'LokiACTION' && strlen trim $POST'LokiACTION' 0 // we have an action to do switch trim...
CVE-2008-2496
CVE-2008-2496 : The provided documents indicate multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4. The affected component is the admin area, with input vectors via PATH_INFO in four PHP pages: index.php, login.php, credits.php, and upgrade/index.php. The vulnerability type is...
Quate CMS 0.3.4 RD Remote Vulnerabilities
No description provided by source...
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow !/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just...
Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow
!/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just telnet to port:4444 to get command prompt : BIG thanks...
Kantaris 0.3.4 SSA Subtitle Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just telnet to port:4444...
