AdaptCMS 2.0 - SQL Injection

source: https://www.securityfocus.com/bid/50795/info AdaptCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...

AdaptCMS 2.x SQL Injection

========================================================================= AdaptCMS 2.x SQL Injection Vulnerability =========================================================================...

AdaptCMS 2.0.1 Cross Site Scripting / Bypass

Advisory: AdaptCMS 2.0.1 Multiple security vulnerabilities Advisory ID: SSCHADV2011-018 Author: Stefan Schurtz Affected Software: Successfully tested on AdaptCMS 2.0.1 Vendor URL: http://www.adaptcms.com/ Vendor Status: fixed CVE-ID: - ========================== Vulnerability Description:...

AdaptCMS 2.0.1 - Cross-Site Scripting Information Disclosure

AdaptCMS 2.0.1 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/49769/info AdaptCMS is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker m...

AdaptCMS 2.0.1 - Cross-Site Scripting / Information Disclosure

source: https://www.securityfocus.com/bid/49769/info AdaptCMS is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to obtain potentially sensitive...

CVE-2011-3698

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...

Information disclosure

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...

CVE-2011-3698

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...

CVE-2011-3698

AdaptCMS 2.0.2 Beta is affected by an information disclosure vulnerability. A direct request to certain PHP files (e.g., inc/poll_vote.php) can cause the server to reveal the installation path in an error message. Affected component is the PHP code paths that generate error output, leading to pot...

PT-2011-4588

Name of the Vulnerable Software and Affected Versions AdaptCMS version 2.0.2 Beta Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as inc/poll vote.php, which reveals the installation path ...

CVE-2011-3698: Exposure of Sensitive Information to an Unauthorized Actor

AdaptCMS 2.0.2 Beta allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/pollvote.php and certain other files...

AdaptCMS 2.0.1 Beta Remote File Inclusion

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' = %q This module can be used to exploit Remote File...

AdaptCMS 2.0.1 Beta Release Remote File Inclusion Vulnerability (msf)

Exploit for php platform in category web applications ===================================================================== AdaptCMS 2.0.1 Beta Release Remote File Inclusion Vulnerability msf ===================================================================== This file is part of the Metasploit...

AdaptCMS 'init.php' Remote File Include Vulnerability

AdaptCMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This may allow th...

AdaptCMS 'init.php' Remote File Include Vulnerability

AdaptCMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)

AdaptCMS 2.0.1 Beta - Remote File Inclusion Metasploit / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' =...

AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' = %q This module can be used to exploit Remote File...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected...

CVE-2010-2618

CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...

CVE-2010-2618

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected...