CVE-2009-0527

AdaptCMS Lite 1.4 is affected by CVE-2009-0527 due to a PHP remote file inclusion in plugins/rss_importer_functions.php. An attacker can supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. This is a remote code execution risk as described in the CVE entry. Public e...

CVE-2009-0527

PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2009-0526

Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...

CVE-2009-0526

AdaptCMS Lite (1.4; and 1.5 per OpenVAS) is affected by multiple cross-site scripting (XSS) vulnerabilities and a remote file-include vulnerability due to insufficient sanitization of user-supplied data in index.php. The issues allow injecting arbitrary script/HTML via the url, acuparam, and the ...

CVE-2009-0527: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2009-0526: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...

AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities

No description provided by source. AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group...

AdaptCMS Lite 1.4 RFI / XSS

AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...

AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== AdaptCMS Lite 1.4 XSS/RFI Multiple Remote Vulnerabilities =========================================================== AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remot...

AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion

AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4524

CVE-2008-4524 affects AdaptCMS Lite and AdaptCMS Pro 1.3, with a SQL injection in the Check User feature (includes/check_user.php) that allows remote attackers to execute arbitrary SQL commands via the user_name parameter. The vulnerability is documented across multiple sources (NVD entry and sub...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4524: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Check User" feature includes/checkuser.php in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

AdaptCMS Lite 1.3 - Blind SQL Injection

AdaptCMS Lite 1.3 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@char...

AdaptCMS Lite 1.3 - Blind SQL Injection

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

adaptcms-blindsql.txt

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

AdaptCMS Lite <= 1.3 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars...