phprojekt-disclose.txt

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

Content Management System for Phprojekt 0.6.1 File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================== Content Management System for Phprojekt 0.6.1 File Disclosure Vuln ==================================================================...

Content Management System for Phprojekt 0.6.1 - File Disclosure

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

acidcat-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Description: Acidcat CMS is a web site and simple Conte...

Acidcat CMS Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Description: Acidcat CMS is a web site and simple Conte...

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Description: Acidcat CMS is a web site and simple Conte...

Acidcat CMS 3.4.1 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Acidcat CMS 3.4.1 Multiple Remote Vulnerabilities ================================================= AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor:...

Acidcat CMS 3.4.1 - Multiple Vulnerabilities

Acidcat CMS 3.4.1 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Acidcat CMS Multiple Vulnerabilities. Vendor: www.acidcat.com Vulnerable Version: 3.4.1 Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/36 1. Descriptio...

[Full-disclosure] Pligg 9.9.0 editlink.php SQL Injection Vulnerability

Hello, the Pligg http://www.pligg.com/ content management system is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query:...

writersblock-sql.txt

Writer’s Block SQL Injection Vulnerabilities ".$GET'PostID'." AND Draft=0 ORDER BY Timestamp ASC LIMIT 1"; ---- x Exploit The issue can be exploited through a web browser. x Patch Just add an intval: ---- permalink.php, line 212: $getpost = @mysqlquery"SELECT Title, Timestamp, Body, PostCat1,...

Writers Block SQL Injection Vulnerabilities

Writer’s Block SQL Injection Vulnerabilities x Vendor Information "If the written word is the wheel, then Writer’s Block is the sweet, sweet fossil fuel in the engine that keeps it spinning. A free, flexible, elegant Content Management System that helps you maintain any web site you want, at any...

phpBP id参数远程SQL注入漏洞

BUGTRAQ ID: 28272 PHPBP是在波兰广泛使用的网站内容管理系统。 PHPBP的includes/functions/banners-external.php脚本文件中没有正确地验证对id参数的输入，允许远程攻击者通过提交特制的SQL查询请求执行SQL注入攻击。 以下是有漏洞的代码段： ... 3 function bannerout //zlicza ilosc klikniec na banner 4 5 global $conf; 6 7 if$GET'id' 8 9 SQLvalidate$POST'id'; 10 11 $db = new dbquery; 12...

PR08-02: Plone CMS Security Research - the Art of Plowning

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR08-02: Plone CMS Security Research: the Art of Plowning Product description: Plone is a ready-to-run content management system built on the powerful, and free, Zope application server. Plone is easy to set up, extremely flexible, and provides you wi...

Nukedit utilities/login.asp email Parameter SQL Injection

The remote host is running Nukedit, a content management system written in ASP. The version of Nukedit installed on the remote host fails to sanitize user input to the 'email' parameter of the 'utilities/login.asp' script before using it in a database query. An unauthenticated attacker may be abl...

[ GLSA 200801-10 ] TikiWiki: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200801-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

idm-disclose.txt

--==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91 Title: Remote File Discolusure...

PacerCMS Multiple Vulnerabilities (XSS/SQL)

PacerCMS Multiple Vulnerabilities XSS/SQL. -------------------------------------------------------- Product: PacerCMS Version: 0.6 Vendor: http://pacercms.sourceforge.net/ Date: 01/22/08 - Introduction PacerCMS is a content management solution for student and non-daily community newspapers. -...

IDM-OS 1.0 - Filename File Disclosure

IDM-OS 1.0 - Filename File Disclosure --==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91...

IDM-OS 1.0 - 'Filename' File Disclosure

--==+================================================================================+==-- --==+ idmos1.0 Remote File Discolousure Vulnerability +==-- --==+================================================================================+==-- Author: MhZ91 Title: Remote File Discolusure...

bloofox 0.3 - SQL Injection File Disclosure

bloofox 0.3 - SQL Injection File Disclosure WwW.BugReport.ir AmnPardaz Security Research Team Title:Bloofox CMS Vulnerabilities Vendor: http://www.bloofox.com Bugs: SQL Injection Authentication bypass , Source code disclosure Vulnerable Version: 0.3 prior versions also may be affected Exploitatio...