8134 matches found
Site@School slideshow_full.php album_name Parameter SQL Injection
The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...
CMS Made Simple content_css.php templateid Parameter SQL Injection
Binary data 4328.prm...
bitweaver-disclose.txt
WwW.BugReport.ir AmnPardaz Security Research Team Title: Bitweaver R2 CMS Vendor: http://www.bitweaver.org Bugs: source code disclosure, arbitrary file upload Vulnerable Version: 2 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Bitweaver is...
Bitweaver R2 CMS Remote File Upload / Disclosure Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: Bitweaver R2 CMS Vendor: http://www.bitweaver.org Bugs: source code disclosure, arbitrary file upload Vulnerable Version: 2 prior versions also may be affected Exploitation: Remote with browser Fix...
Bitweaver R2 CMS - Arbitrary File Upload / Disclosure
WwW.BugReport.ir AmnPardaz Security Research Team Title: Bitweaver R2 CMS Vendor: http://www.bitweaver.org Bugs: source code disclosure, arbitrary file upload Vulnerable Version: 2 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! - Description: Bitweaver is...
DSA-1439-1 typo3-src
Bulletin has no description...
[SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression
-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 1st, 2007 http://www.debian.org/security/faq -...
Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability
H - Security Labs Tikiwiki v1.9.8.3 Security Advisory ID : HSEC20072212 General Information -------------------------- Name : Tikiwiki 1.9.8.3 Vendor HomePage :http://tikiwiki.org Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline ------------------------- 17 December...
[ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack
============================================= INTERNET SECURITY AUDITORS ALERT 2007-006 - Original release date: December 18th, 2007 - Last revised: December 24th, 2007 - Discovered by: Jesus Olmos Gonzalez - Severity: 5/5 ============================================= I. VULNERABILITY...
[SECURITY] Fedora 8 Update: drupal-5.4-1.fc8
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
[SECURITY] Fedora 7 Update: drupal-5.4-1.fc7
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
runcms-lfi.txt
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versions also may be affected Exploitatio...
RunCMS <= 1.6 Local File Inclusion Vulnerability
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versio...
RunCMS <= 1.6 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================ RunCMS Local File Inclusion Remote Code Execution Code Snippet: /include/common.php line131-143 // :: Register Globals Compatibility :: $globalstest = @ini...
ProfileCMS <= 1.0 (id) Remote SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
ProfileCMS 1.0 - id SQL Injection
ProfileCMS 1.0 - id SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
PicoFlat CMS多个远程安全绕过漏洞
PicoFlat CMS是一款内容管理系统。 PicoFlat CMS不正确验证用户权限，远程攻击者可以利用漏洞绕过安全限制，访问应用程序执行管理员功能。 目前没有详细漏洞细节提供。 PicoFlat CMS PicoFlat CMS 0.4.14 PicoFlat CMS PicoFlat CMS 0.4.5 升级程序： PicoFlat CMS PicoFlat CMS 0.4.14 PicoFlat CMS PicoFlatCMS24102007.0.4.18.tar.gz...
DSA-1405-2 zope-cmfplone - arbitrary code
Bulletin has no description...
[SECURITY] Fedora 7 Update: drupal-5.3-1.fc7
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
TikiWiki: Arbitrary command execution
Background TikiWiki is an open source content management system written in PHP. Description ShAnKaR reported that input passed to the "f" array parameter in tiki-graphformula.php is not properly verified before being used to execute PHP functions. Impact An attacker could execute arbitrary code...