CVE-2010-2436

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2010-2437: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in class/tools.class.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the comment variable to modules/blog/index.php...

CVE-2010-2436: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/blog/index.php in AneCMS Blog 1.3 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

AneCMS 1.3 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB22407 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinanecmsblogmodule.html Product: AneCMS Vendor: AneCMS Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: Stored XSS Cross Site Scripting Status:...

Stored XSS vulnerability in AneCMS blog module

Vulnerability ID: HTB22407 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinanecmsblogmodule.html Product: AneCMS Vendor: AneCMS Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: Stored XSS Cross Site Scripting Status:...

SQL injection vulnerability in AneCMS

Vulnerability ID: HTB22408 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinanecms.html Product: AneCMS Vendor: AneCMS Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 28 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted...

AneCMS 1.x - '/modules/blog/index.php' HTML Injection

source: https://www.securityfocus.com/bid/40838/info AneCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

AneCMS 1.x - '/modules/blog/index.php' SQL Injection

source: https://www.securityfocus.com/bid/40840/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

AneCMS 1.x - modulesblogindex.php SQL Injection

AneCMS 1.x - modulesblogindex.php SQL Injection source: https://www.securityfocus.com/bid/40840/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

AneCMS 1.x - modulesblogindex.php HTML Injection

AneCMS 1.x - modulesblogindex.php HTML Injection source: https://www.securityfocus.com/bid/40838/info AneCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected...

Multiple Vulnerabilities in AneCMS

High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in AneCMS which could be exploited to perform cross-site scripting and script insertion attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting XSS vulnerability in AneCMS The...

AneCMS 1.0 Code Execution / Local File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: AneCMS Multiple Vulnerabilities Vendor: http://anecms.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with a RAW HTTP packet sender Fix: N/A - Description: AneCMS is a small and fast CMS completely modular. Written...

AneCMS 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local...

AneCMS Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: AneCMS Multiple Vulnerabilities Vendor: http://anecms.com/ Vulnerable Version: 1.0 Latest version till now Exploitation: Remote with a RAW HTTP packet sender Fix: N/A - Description: AneCMS is a small and fast CMS completely modular. Written...

AneCMS 1.0 - Multiple Local File Inclusions

AneCMS 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive...

Ane CMS Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ Ane CMS Multiple Vulnerabilities ================================ www.BugReport.ir AmnPardaz Security Research Team Title: AneCMS Multiple Vulnerabilities Vendor: http://anecms.com/ Vulnerable Version: 1.0 Late...

AneCMS 1.0 - index.php Multiple HTML Injection Vulnerabilities

AneCMS 1.0 - index.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38657/info AneCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and scrip...

AneCMS 1.0 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38657/info AneCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potential...