CVE-2014-2847

SQL injection vulnerability in default.asp in CIS Manager CMS allows remote attackers to execute arbitrary SQL commands via the TroncoID parameter...

CVE-2014-2847

CVE-2014-2847 affects CIS Manager CMS, where the vulnerability is an SQL injection in the default.asp handling the TroncoID parameter. The root cause is improper input handling allowing an attacker to craft input that leads to arbitrary SQL execution on the backend database. Impact is described a...

CIS Manager 'TroncoID'参数SQL注入漏洞

Bugtraq ID:66590 CIS Manager CMS是一款内容管理系统。 CIS Manager CMS不正确过滤'TroncoID'参数，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 CIS Manager CMS 目前没有详细解决方案： http://www.construtiva.com.br/...

CIS Manager CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: email protected + Tested on: Windows 7 and Linux + Vulnerable File: default.asp +...

CIS Manager CMS - SQL Injection

CIS Manager CMS - SQL Injection + Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork :...

CIS Manager CMS - SQL Injection

Sql Injection on CIS Manager CMS + Date: 01/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.construtiva.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: default.asp + Dork : intext:"Powered by CIS Manager" +...

[SecureCheq v1.0] The Security Configuration Management made easy!

SecureCheq is a fast, simple utility for Windows servers and desktops that answers these questions while it tests for common configuration risks. This free utility: Tests for a subset of typical and often dangerous Windows configuration errors Provides detailed remediation and repair advice Tests...

CIS Manager SQL Injection

Exploit Title : CIS Manager SQL Injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.construtiva.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CIS Manager" Date: 2013/09/10...

Team GhostShell leak One Million Records

TeamGhostShell a team linked with the Activist group Anonymous, is claiming that they have hacked some major U.S. institutions including major banking institutions, accounts of politicians and has posted those details online. The dumps comprising of millions of accounts has been let loose on the...

mysql-audit NSE Script

Audits MySQL database server security configuration against parts of the CIS MySQL v1.0.2 benchmark the engine can be used for other MySQL audits by creating appropriate audit files. Script Arguments mysql-audit.password the password with which to connect to the database mysql-audit.username the...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. If you do not use this service, then disable it as ...

Detect the HTTP RPC endpoint mapper

This detects the http-rpc-epmap service by connecting to the port 593 and processing the buffer received. This endpoint mapper provides CIS COM+ Internet Services parameters like port 135 epmap for RPC. OpenVAS Vulnerability Test $Id: http-rpc-epmap.nasl 8023 2017-12-07 08:36:26Z teissa $...

Detect CIS ports

This detects the CIS ports by connecting to the server and processing the buffer received. CIS COM+ Internet Services are RPC over HTTP tunneling and requires IIS to operate. CIS ports shouldn SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced...

CVE-2005-0574

Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. dot dot sequences in the URL...

CIS3513.txt

-= x0n3-h4ck Italian Security Team =- /Advisories\ / Application: CIS WebServer Vendor's Url: www.cisindia.net Version: 3.5.13 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL [email protected] www.x0n3-h4ck.org \ Description CIS WebServer is an easy http server, A...

CVE-2005-0574

CVE-2005-0574 describes a directory traversal vulnerability in CIS WebServer 3.5.13 that allows remote attackers to read arbitrary files through URL paths containing dot-dot (..) sequences. The vulnerability is documented in multiple sources (NVD, Red Hat, CVE List) with the same description. The...

CIS WebServer 3.5.13 - Directory Traversal

CIS WebServer 3.5.13 - Directory Traversal source: https://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files...

CIS WebServer 3.5.13 - Directory Traversal

source: https://www.securityfocus.com/bid/12662/info A vulnerability has been identified in the handling of certain types of requests by CIS WebServer. Because of this, it is possible for an attacker to gain access to potentially sensitive system files. The problem is in the handling of directory...

[Full-Disclosure] CIS WebServer Directory Traversal Bug

-= x0n3-h4ck Italian Security Team =- /Advisories / Application: CIS WebServer Vendor's Url: www.cisindia.net Version: 3.5.13 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL [email protected] www.x0n3-h4ck.org Description CIS WebServer is an easy http server, A...