OpenRat <= 0.8-beta4 (tpl_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== OpenRat ... 0day.today 2018-02-18...

WCMS v.1.0b (news_detail.asp id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ===================================================================...

WCMS 1.0b - Arbitrary Add Admin

WCMS 1.0b - Arbitrary Add Admin !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

WCMS 1.0b - news_detail.asp SQL Injection

WCMS 1.0b - newsdetail.asp SQL Injection ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, |...

wcms-admin.txt

!/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------...

WCMS v.1.0b Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ======================================= WCMS v.1.0b Arbitrary Add Admin Exploit ======================================= !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit...

wcms-sql.txt

======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

WCMS v.1.0b Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

WCMS v.1.0b (news_detail.asp id) Remote SQL Injection Vulnerability

No description provided by source. ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

WCMS 1.0b - Arbitrary Add Admin

!/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------...

E-Php CMS (article.php es_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ E-Php CMS article.php esid Remote SQL Injection Vulnerability ================================================================ E-Php Content Management System HaCkerEgy ;...

pluck < 4.5.3 Multiple Local File Include Vulnerabilities

The remote host is running pluck, a simple content management system written in PHP. The version of pluck installed on the remote host fails to sanitize user-supplied input to several parameters before using it in 'data/inc/themes/predefinedvariables.php' or 'data/inc/blogincludereact.php' to...

[SECURITY] Fedora 9 Update: drupal-6.4-1.fc9

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 8 Update: drupal-5.10-1.fc8

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

Masir Camp E-Shop Module &lt;= 3.0 (ordercode) SQL Injection Vuln

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1...

Masir Camp E-Shop Module 3.0 - ordercode SQL Injection

Masir Camp E-Shop Module 3.0 - ordercode SQL Injection www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory:...

Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Masir Camp E-Shop Module = 3.0 SQL Injection Vendor: www.masir.net Vulnerable Version: 3.0 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index52.htm 1. Description: Masir Camp is an...

CVE-2008-3926

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

Directory traversal

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...