588 matches found
程氏舞曲 任意文件下载与设计缺陷
简要描述： 有利用条件！烦。 详细说明： 利用条件： 1、cms设置使用本机物理路径，就是上传文件存在本机服务器上。 2、后台关闭审核功能，或者通过审核。 条件1比较好达到，一般都在本机上。 条件2需要精心构造一下。 漏洞页面： user/music.php addsave函数用来上传歌曲的，这里提交数据包。...
w-CMS 2.0.1 - Remote Code Execution Vulnerability
No description provided by source...
Webbler CMS 3.1.3 Mail A Friend Open Email Relay Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25045/info The 'webbler' is prone to an open-email-relay vulnerability. An attacker may leverage the issue to use webservers that are hosting the vulnerable software to send arbitrary unsolicited bulk email. Attackers may...
Ecomat CMS Remote SQL Injection Vulnerability
No description provided by source. Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: S...
Schaf-CMS 1.0 - SQL Injection Vulnerability
No description provided by source. Schaf-CMS 1.0 SQL Injection Vulnerability Author : Manas58 Homepage : http://www.1923turk.com Script : Schaf-CMS 1.0 Download : http://www.brothersoft.com/site-builder-software---cms-53489.html Vulnerable File cms.php?id= SQL XpL...
Joomla Component com_articleman Upload Vulnerability
No description provided by source...
JM CMS 1.0 <= 1.0 - (Auth Bypass) SQL Injection Vulnerability
No description provided by source...
CCleague Pro <= 1.0.1RC1 (Cookie) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? $devilteam = ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+:...
EUVD-2013-4578
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a request to Admin/top.aspx...
CVE-2013-4723
CVE-2013-4723 describes an open redirect in DDSN Interactive cm3 Acora CMS. Affected versions include 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, and 5.5.0/1b-p1 (and possibly others). The underlying issue is a redirect via a URL parameter (the l parameter to track.aspx), allowing remote attackers to route us...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla
Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...
Innovation CMS uploadImageFile_do. jsp page file upload vulnerability-vulnerability warning-the black bar safety net
Brief description: Innovation CMS any upload JSP executable script file vulnerability, affecting a large number of office, municipal government website. Detailed description: Before the vulnerability is reported in a cnvd, it should be cnvd requirements to the vulnerability reported to the tick. ...
Easy CMS enterprise built Station system vulnerability 0day-vulnerability warning-the black bar safety net
Easy CMS enterprise built Station system vulnerability 0day in injection: The relevant code: ........................ Omitted part of the.................................... id=request"id":id1=SplitIDs,", ":delid=replacerequest"id","'","" set rs = server. createobject"adodb. recordset" sql="DELET...
Woven dream CMS vulnerability dedecms vulnerability 2013-02-10 SQL injection vulnerability-vulnerability warning-the black bar safety net
www.xxx.com/plus/search.php?keyword= In include/shopcar. class. php First take a look at this shopcar class is how to generate the cookie function saveCookie$key,$value ifisarray$value $value = $this-enCrypt$this-enCode$value; else $value = $this-enCrypt$value; setcookie$key,$value,time+3 6 0 0...
Woven dream CMS vulnerability dedecms vulnerability 2013-02-10 SQL injection vulnerability-vulnerability warning-the black bar safety net
www.xxx.com/plus/search.php?keyword= In include/shopcar. class. php First take a look at this shopcar class is how to generate the cookie 2 3 9 function saveCookie$key,$value 2 4 0 2 4 1 ifisarray$value 2 4 2 2 4 3 $value = $this-enCrypt$this-enCode$value; 2 4 4 2 4 5 else 2 4 6 2 4 7 $value =...
11in1 CMS v1.2.1 - SQL Injection Vulnerabilities
Title: ====== 11in1 CMS v1.2.1 - SQL Injection Vulnerabilities Date: ===== 2012-03-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=465 VL-ID: ===== 465 Introduction: ============= 11in1 is an open-source content management system CMS that is powered by PHP and MySQL...
Anchor v0.6-0.4 CMS - Persistent Web Vulnerability
Document Title: =============== Anchor v0.6-0.4 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=453 Release Date: ============= 2012-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 453...
SenseSites CommonSense CMS - special.php?id SQL Injection
SenseSites CommonSense CMS - special.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
Portix-CMS 1.5.0 RC5 Local File Inclusion
-==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link: http://www.easy-script.com/scripts-PHP/portix-cms-150-rc5-3005.html Version: v1.5.0. rc5 Tested on: windows ...