8135 matches found
CVE-2011-1559
Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...
CVE-2011-1558
CVE-2011-1558 describes multiple XSS vulnerabilities in the IBM Web Interface for Content Management (WEBi) version 1.0.4 before FP3, allowing remote attackers to inject arbitrary scripts or HTML via unspecified vectors. The provided documents do not specify the exact root cause, affected subcomp...
CVE-2011-1559
Technical details about CVE-2011-1559 are not publicly provided in the connected documents. The descriptions remain generic; monitor for updates from NVD/Red Hat/IBM for affected products and remediation.
Tutorialms 1.4 - 'show' SQL Injection
TutorialMS v1.4 show Remote SQL Injection Vulnerability . . --------------------------------------------------------------------------------- | | | Vendor: TutorialMS.com | | Product web page: http://www.tutorialms.com | | Affected version: 1.4 | | | | Summary: TutorialMS is a free content...
Tutorialms 1.4 - show SQL Injection
Tutorialms 1.4 - show SQL Injection TutorialMS v1.4 show Remote SQL Injection Vulnerability . . --------------------------------------------------------------------------------- | | | Vendor: TutorialMS.com | | Product web page: http://www.tutorialms.com | | Affected version: 1.4 | | | | Summary:...
Joomla! 1.6 < 1.6.1 Multiple Vulnerabilities (deprecated)
Binary data 5878.prm...
PHP-Nuke 8. x <= "chng_uid" blind defect and repair-vulnerability warning-the black bar safety net
Affected version: PHP-Nuke 8. x = Vulnerability description: PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features...
Baar3 Content Managment System BSQLI Vulnerability
Exploit for php platform in category web applications Exploit Title: + Baar3 Content Managment System BSQLI Vulnerable + Google Dork: + No Dork's + Author: + h1kt0s4 437Cr3w + Home : + 437Cr3w.org | AfghanExploiter.af + Soon Software Link: +http://baar3.orbit.net.sa/+ + Script Price 1000$ :D Shit...
e107 vulnerable to cross-site scripting
Overview e107 contains a cross-site scripting vulnerability. e107 provided by e107.org is a Content Management System CMS software. e107 contains a cross-site scripting vulnerability. Daiki Fukumori reported this vulnerability to IPA. JPCERT/CC coordinated with the vendor under Information Securi...
Family Connections CMS 2.3.2 (POST) Stored XSS And XPath Injection
Exploit for php platform in category web applications Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xpath".submit; function xssdocument.forms"xss".submit; input type="hidden" name="message" valu...
Family Connections CMS 2.3.2 stored cross site and XPath injection vulnerability-vulnerability warning-the black bar safety net
Family Connections is an open source content management system, it can be easy and convenient to create a private family site. Family Connections 2.3.2 the presence of the stored cross site and XPath injection vulnerability may lead to sensitive information disclosure. +info: Family Connections C...
Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting XML Injection
Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting XML Injection Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xml".submit; function xssdocument.forms"xss".submit; a href="javascri...
Family Connections CMS 2.3.2 - Persistent Cross-Site Scripting / XML Injection
Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xml".submit; function xssdocument.forms"xss".submit; br...
Family Connections 2.3.2 - 'subject' HTML Injection
source: https://www.securityfocus.com/bid/47037/info Family Connections is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...
Family Connections 2.3.2 - subject HTML Injection
Family Connections 2.3.2 - subject HTML Injection source: https://www.securityfocus.com/bid/47037/info Family Connections is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
PHP-Nuke 8.x Cross Site Scripting
PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...
PHP-Nuke 8.x Cross Site Request Forgery
PHP-Nuke 8.x = Cross Site Request Forgery CSRF / Anti-CSRF Bypass Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower versions are vulnerable to Cross Site Request Forgery CSRF because its Anti-CSRF mechanism Referer Check is found to be broken. 2. BACKGROUND PHP-Nuke is a Web Portal...
PHP-Nuke 8.x <= Cross Site Scripting Vulnerability
PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...
iCMS 1.1 the SQL injection and the background blasting vulnerability-vulnerability warning-the black bar safety net
Icms is an efficient content management system for small and medium web site provides a perfect solution. iCMS 1.1 existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: iCMS v1. 1 Admin SQLi/Bruteforce Exploit +poc: view source print? | 0 0 1 | !/...
CMS Balitbang 3.3 - Arbitrary File Upload
=================================================================== CMS Balitbang v.3.3 Arbitary file upload vulnerability =================================================================== Software: CMS Balitbang Vendor: www.kajianwebsite.org Vuln Type: Arbitary file upload Download link:...