CVE-2007-6584

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lang parameter to pages/print/default/ops/news.php or 2 the themedir parameter to pages/download/default/ops/search.php; or the adminthemedi...

CVE-2007-6583

SQL injection vulnerability in admin/ops/findip/ajax/search.php in 1024 CMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via the ip parameter...

CVE-2007-6584

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lang parameter to pages/print/default/ops/news.php or 2 the themedir parameter to pages/download/default/ops/search.php; or the adminthemedi...

CVE-2007-6584

1024 CMS 1.3.1 is affected by multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via ../ in specific parameters (lang, theme_dir, admin_theme_dir) across several pages (news.php, search.php, download.php, forum.php, etc.). The not...

CVE-2007-6583

CVE-2007-6583 is a SQL injection vulnerability in the 1024 CMS 1.3.1, specifically in the file path admin/ops/findip/ajax/search.php. The underlying issue allows remote attackers to inject SQL via the ip parameter and may enable partial confidentiality and integrity impact and partial availabilit...

1024 CMS 1.3.1 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. vuln.: 1024 CMS 1.3.1 LFI/SQL Multiple Vulnerabilities script info and download: http://www.1024cms.com author: irk4zatyahoo.pl greets to: str0ke, wacky '-----------------------------------------------------------------------------' sql-injection: code:...

1024 CMS 1.3.1 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== 1024 CMS 1.3.1 LFI/SQL Multiple Remote Vulnerabilities ======================================================== vuln.: 1024 CMS 1.3.1 LFI/SQL Multiple Vulnerabilities script info and...

1024 CMS 1.3.1 - Local File Inclusion SQL Injection

1024 CMS 1.3.1 - Local File Inclusion SQL Injection vuln.: 1024 CMS 1.3.1 LFI/SQL Multiple Vulnerabilities script info and download: http://www.1024cms.com author: irk4zatyahoo.pl greets to: str0ke, wacky '-----------------------------------------------------------------------------' sql-injectio...

CVE-2007-5575

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...

CVE-2007-5575

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

CVE-2007-2507

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...

Directory traversal

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...

CVE-2007-2507

CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

No description provided by source. '/ -.- --------------------oOO------OOo-------------------...

1024CMS-disclose.txt

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...

1024 CMS 0.7 - download.php Remote File Disclosure

1024 CMS 0.7 - download.php Remote File Disclosure '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor :...

1024 CMS 0.7 - 'download.php' Remote File Disclosure

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...