EUVD-2009-3103

Malware in sbrugna...

EUVD-2009-2375

Malware in sbrugna...

CVE-2009-3120

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

BigACE 2.7.5 - LANGUAGE Directory Traversal

BigACE 2.7.5 - LANGUAGE Directory Traversal source: https://www.securityfocus.com/bid/66350/info BIGACE Web CMS is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these...

Path disclosure in BIGACE Web CMS

Vulnerability ID: HTB22690 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbigacewebcms.html Product: BIGACE Web CMS Vendor: Kevin Papst http://www.bigace.de/ Vulnerable Version: 2.7.3 Vendor Notification: 02 November 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor...

CVE-2009-3120

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3120

CVE-2009-3120 is an XSS vulnerability affecting BIGACE Web CMS 2.6, reachable via public/index.php and the id parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with no confidentiality impact, partial integ...

CVE-2009-3120

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3120: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2379

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2379

CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...