SQL injection vulnerability in CMSQLite

Vulnerability ID: HTB22462 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmsqlite1.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

CMSQLite SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== CMSQLite SQL Injection Vulnerability ==================================== Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions June 2010 Vulnerability Type: SQL...

CMSQLite - SQL Injection

CMSQLite - SQL Injection Vulnerability ID: HTB22462 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmsqlite1.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: SQL Injection...

CMSQLite Cross Site Scripting / SQL Injection

================================================= Vulnerability ID: HTB22464 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsqlite.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type:...

CMSQLite - SQL Injection

Vulnerability ID: HTB22462 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityincmsqlite1.html Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 29 June 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

CMSQlite / CMySQLite 1.3 Cross Site Request Forgery

Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect for freelancers, self-employeds, clubs and...

Cross-site Scripting (XSS) Vulnerability in CMSQLite

High-Tech Bridge SA Security Research Lab has discovered vulnerability in CMSQLite which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in CMSQLite The vulnerability exists due to input sanitation error in the "langId" parameter in...

CMSQLite CMySQLite 1.3 - Cross-Site Request Forgery

CMSQLite CMySQLite 1.3 - Cross-Site Request Forgery Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect...

CMSQLite / CMySQLite 1.3 - Cross-Site Request Forgery

Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor: http://www.cmsqlite.net Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System CMS. It's perfect for freelancers, self-employeds, clubs and...

CMSQlite & CMySQLite CSRF Vulnerability

Exploit for php platform in category web applications ======================================= CMSQlite & CMySQLite CSRF Vulnerability ======================================= Title: CMSQlite & CMySQLite CSRF Vulnerability Author: ADEO Security Published: 28/06/2010 Version: v1.3 = Vendor:...

CMSQlite 'index.php' SQL Injection and Directory Traversal Vulnerabilities

CMSQlite is prone to multiple SQL injection and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2096

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CVE-2010-2095

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

Directory traversal

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

Sql injection

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-2095

SQL injection vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-2096

CVE-2010-2096 is a directory traversal vulnerability in CMSQlite

CVE-2010-2095

CVE-2010-2095 corresponds to a SQL injection in CMSQlite, affecting CMSQlite 1.2 and earlier. The vulnerability occurs in index.php via the c parameter, enabling remote SQL command execution. CVSS v2 base score 7.5 (HIGH) with Network attack vector, low attack complexity, no authentication, and p...

CVE-2010-2096

Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...

CMSQLite <= 1.2 c参数SQL注入漏洞

CMSQLite是基于PHP和SQLite的内容管理系统。 CMSQlite的index.php页面存在SQL注入漏洞： ifisset$GET'c' $contentId=$GET'c'; else if $seourl $arrArticleInfo = $SYSTEM-resolveURL$SERVER'REQUESTURI', $langId; ifempty$arrArticleInfo $contentId=1; else $contentId = $arrArticleInfo0'articleId'; $module = $arrArticleInfo0'module';...