Authentication flaw

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

CVE-2008-2298

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

CVE-2008-2298

Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1...

CVE-2008-2084

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

Sql injection

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

CVE-2008-2084

CVE-2008-2084 describes an SQL injection vulnerability in the MyArticles 0.6 beta-1 module for RunCMS, exploitable via the topic_id parameter in the listarticles action within topics.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected software is the RunCMS MyArticl...

Wordpress Plugin Spreadsheet <= 0.6 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Wordpress Plugin Spreadsheet query"SELECT FROM $tablename WHERE id='$id'" == 0 .... 0day.today 2018-04-10...

CVE-2008-0818

Multiple directory traversal vulnerabilities in freePHPgallery 0.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie to 1 comment.php, 2 index.php, and 3 show.php...

CVE-2008-0818

CVE-2008-0818 affects freePHPgallery 0.6. The vulnerability arises from a directory traversal flaw in the lang cookie, allowing remote attackers to include and execute local files via the cookie to (1) comment.php, (2) index.php, and (3) show.php. Connected sources reiterate the same affected com...

PacerCMS 0.6 - 'last_module' Remote Code Execution

PacerCMS 0.6 lastmodule Remote Code Execution Vulnerability Script : http://ovh.dl.sourceforge.net/sourceforge/pacercms/pacercms0.6.zip Dork : Powered by PacerCMS POC : /includes/adodblite/adodb-perf-module.inc.php?lastmodule=t;%20class%20t;passthruls;// OR INCLUDE SHELL...

CVE-2008-0451

Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...

Sql injection

Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...

Deserialization of untrusted data

actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote attackers to obtain access to any account via a lostpass action...

CVE-2008-0142

CVE-2008-0142 affects WebPortal CMS 0.6-beta, with multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via the user_name parameter to actions.php and other vectors. Root cause: input unsafely concatenated into SQL queries. Impact: arbitrary ...

PT-2008-1794 · Webportal · Webportal Cms

Name of the Vulnerable Software and Affected Versions: WebPortal CMS version 0.6-beta Description: The issue allows remote attackers to obtain access to any account via a lostpass action because the actions.php file in WebPortal CMS generates predictable passwords containing only the time of day...

WebPortal CMS 0.6-beta Remote Password Change Exploit

No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ ...

webportalcms-passwd.txt

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

WebPortal CMS 0.6-beta - Remote Password Change

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...

CVE-2007-5306

ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information full path via unspecified vectors to utilisateurs/votesresultats.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 contenus parameter to a contenus.php; the 2 tpelseifportalrepertoire parameter to b votes.php, c espaceperso.php, d enregistrement.php, e...