Directory traversal

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2379

CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...

CVE-2009-2379

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2379: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

BIGACE CMS 2.6 Local File Inclusion

-----------------:LFI:---------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------- script : BIGACE 2.6 download :...

BigACE 2.6 - 'cmd' Local File Inclusion

-----------------:LFI:---------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------- script : BIGACE 2.6 download :...

BigACE 2.6 - cmd Local File Inclusion

BigACE 2.6 - cmd Local File Inclusion -----------------:LFI:---------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------- script : BIGACE 2.6 download :...

BIGACE CMS 2.6 (cmd) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= BIGACE CMS 2.6 cmd Local File Inclusion Vulnerability =======================================================...

BIGACE CMS 2.6 (cmd) Local File Inclusion Vulnerability

No description provided by source. -----------------:LFI:---------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------- script : BIGACE 2.6 download :...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1778

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1778

CVE-2009-1778 affects BigACE CMS 2.5: SQL injection in the new user registration feature when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the username parameter. The provided documents do not include remediation details (patch/version) or explicit exploita...

CVE-2009-1778: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the new user registration feature in BigACE CMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

BigACE username参数SQL注入漏洞

BUGTRAQ ID: 34920 BIGACE是免费的Web内容管理系统，可帮助创建和管理网站。 在注册新用户时BIGACE没有正确地过滤对username参数的输入，远程攻击者可以提交恶意请求执行SQL注入攻击。成功利用这个漏洞要求禁用了magicquotesgpc。 Kevin Papst BigACE 2.5 厂商补丁： Kevin Papst ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.bigace.de/index.html...

Bigace CMS 2.5 SQL Injection

!/usr/bin/perl ----------------------------------------------------------------------------- User options changer SQLi EXPLOIT --Bigace CMS -stable release- 2.5-- ----------------------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.bigace.de/ --DOWNLOAD...

BIGACE CMS 2.5 (username) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

BIGACE CMS 2.5 (username) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== BIGACE CMS 2.5 username Remote SQL Injection Exploit ====================================================== !/usr/bin/perl...

BigACE 2.5 - SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

User options changer (SQLi) EXPLOIT --Bigace CMS -stable release- 2.5-->

!/usr/bin/perl ----------------------------------------------------------------------------- User options changer SQLi EXPLOIT --Bigace CMS -stable release- 2.5-- ----------------------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.bigace.de/ --DOWNLOAD...