Contenido CMS 4.8.12 XSS Vulnerabilities

Exploit for php platform in category web applications ======================================== Contenido CMS 4.8.12 XSS Vulnerabilities ======================================== Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably...

Contenido CMS 4.8.12 Cross Site Scripting

Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...

Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities

Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45160/info Contenido CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

Contenido CMS 4.8.12 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45160/info Contenido CMS is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

Contenido CMS 4.8.12 - Cross-Site Scripting

Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...

Contenido CMS 4.8.12 - Cross-Site Scripting

Contenido CMS 4.8.12 - Cross-Site Scripting Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor...

Cross-site Scripting (XSS) Vulnerabilities in Contenido CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Contenido CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Contenido CMS 1.1 The vulnerability exists due to input sanitation error in the "idart"...

CVE-2008-2912

Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 contenidopath parameter to a contenido/backendsearch.php; the 2 cfgpathcontenido parameter to b movearticles.php, c moveoldstats.php, d...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 contenido, 2 Belang, and 3 username parameters...

CVE-2008-2911

Multiple cross-site scripting XSS vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 contenido, 2 Belang, and 3 username parameters...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 contenidopath parameter to a contenido/backendsearch.php; the 2 cfgpathcontenido parameter to b movearticles.php, c moveoldstats.php, d...

CVE-2008-2912

Affected software. Contenido CMS (versions up to at least 4.8.4 for CVE-2008-2912; CVE-2006-5380 concerns some earlier versions). Vulnerability type. Remote File Inclusion (RFI) vulnerabilities allow remote attackers to execute arbitrary PHP code. Attack surface and vectors (as stated). In CVE-20...

CVE-2008-2912

Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 contenidopath parameter to a contenido/backendsearch.php; the 2 cfgpathcontenido parameter to b movearticles.php, c moveoldstats.php, d...

CVE-2008-2911

Multiple cross-site scripting XSS vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 contenido, 2 Belang, and 3 username parameters...

CVE-2008-2911

CVE-2008-2911 describes multiple cross-site scripting (XSS) vulnerabilities in the Contenido 4.8.4 index.php, exploitable via the parameters (1) contenido, (2) Belang, and (3) username. The adjacent documents consistently identify the issue as XSS without detailing a specific exploit vector beyon...

contenideo-rfixss.txt

Script Name : Contenido Type Of Script : Content-Management Version : 4.8.4 May Be Older Is Infected I Don,t See !!! Download From : http://www.contenido.org/en/upload/versionen/Contenido4.8.4.zip Found : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Homepage : WwW.4RxH.CoM & Member From Tryag Forum We Will Be...

Contenido 4.8.4 - Remote File Inclusion / Cross-Site Scripting

Script Name : Contenido Type Of Script : Content-Management Version : 4.8.4 May Be Older Is Infected I Don,t See !!! Download From : http://www.contenido.org/en/upload/versionen/Contenido4.8.4.zip Found : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Homepage : WwW.4RxH.CoM & Member From Tryag Forum We Will Be...

Contenido 4.8.4 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Contenido 4.8.4 RFI/XSS Multiple Remote Vulnerabilities ========================================================= Script Name : Contenido Type Of Script : Content-Management Version...

Contenido 4.8.4 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. Script Name : Contenido Type Of Script : Content-Management Version : 4.8.4 May Be Older Is Infected I Don,t See !!! Download From : http://www.contenido.org/en/upload/versionen/Contenido4.8.4.zip Found : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Homepage : WwW.4RxH.CoM &...

novus-sql.txt

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...