8135 matches found
CVE-2009-2929
Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the 1 tgslanguageid, 2 tpldir, 3 referer, 4 user-agent, 5 site, 6 option, 7 dboptimization, 8 owner, 9 adminemail, 10 defaultlanguage, and 11 dbhost parameters to...
Sql injection
Multiple SQL injection vulnerabilities in TGS Content Management 0.x allow remote attackers to execute arbitrary SQL commands via the 1 tgslanguageid, 2 tpldir, 3 referer, 4 user-agent, 5 site, 6 option, 7 dboptimization, 8 owner, 9 adminemail, 10 defaultlanguage, and 11 dbhost parameters to...
CVE-2009-2928
Cross-site scripting XSS vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previouspage parameter, a different vector than CVE-2008-6839...
CVE-2009-2928
Cross-site scripting XSS vulnerability in login.php in TGS Content Management 0.x allows remote attackers to inject arbitrary web script or HTML via the previouspage parameter, a different vector than CVE-2008-6839...
CVE-2009-2928
CVE-2009-2928 is an XSS vulnerability in TGS Content Management 0.x, specifically in login.php, where the parameter previous_page can inject arbitrary script/HTML. This entry is supported by NVD details (description of XSS via previous_page) and does not include explicit exploit status or a publi...
CVE-2009-2929
CVE-2009-2929 affects TGS Content Management 0.x. The vulnerability is multiple SQL injection points in cms/index.php (parameters including tgs_language_id, tpl_dir, referer, user-agent, site, option, db_optimization, owner, admin_email, default_language, db_host) and cms/frontpage_ception.php (p...
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File
SPIP 2.0.9 - Arbitrary Copy All Passwords to .XML File !/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== SPIP " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire =...
SPIP Copy All Passwords
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
Plume CMS 1.2.3 Multiple SQL Injection Vulnerabilities
No description provided by source. Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity...
Papoo CMS Code Execution
Advisory: Papoo CMS: Authenticated Arbitrary Code Execution The Papoo CMS allows authenticated users to upload GIF, JPG and PNG images if they have the "upload images" privilege, which is true for all default groups that can access the administrative interface. The CMS checks the uploaded images...
Papoo CMS 3.7.3 - (Authenticated) Arbitrary Code Execution
Advisory: Papoo CMS: Authenticated Arbitrary Code Execution The Papoo CMS allows authenticated users to upload GIF, JPG and PNG images if they have the "upload images" privilege, which is true for all default groups that can access the administrative interface. The CMS checks the uploaded images...
MAXcms 3.11.20b - Multiple Remote File Inclusions
=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...
MAXcms 3.11.20b - Multiple Remote File Inclusions
MAXcms 3.11.20b - Multiple Remote File Inclusions =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version...
MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities ==============================================================...
MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities
No description provided by source. =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendo...
Joomla! HTTP header cross-site scripting vulnerability-vulnerability warning-the black bar safety net
From the green Alliance:no commercial use indicate in advance Joomla! Is an open source content management system CMS to. Joomla! Not properly filter the user in the HTTP request the the submission of the HTTPREFERER variable, a remote attacker can submit a malicious request to inject JavaScript ...
[Full-disclosure] Drupal 6 Date/Calendar XSS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability Report Date of Original Vendor Contact: May 19, 2009 11:45 GMT -0400 Report Number: 8890 Author: Justin C. Klein Keane [email protected] Details of this vulnerability are also posted at the public URL...