Elxis CMS <= 2006.4 - banner module - sql injection

Elxis Content Management System Banner Mod SQL Injection Jun 14 2007 ------------------------------------------------------------------------------- Product Elxis Content Management System Vulnerable Versions All versions to 2006.4 of the Elxis CMS. Vendor Status The Vendor was notified and the...

PhpWiki: Remote execution of arbitrary code

Background PhpWiki is an open source content management system written in PHP. Description Harold Hallikainen has reported that the Upload page fails to properly check the extension of a file. Impact A remote attacker could upload a specially crafted PHP file to the vulnerable server, resulting i...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/pcltar.lib.php aka pcltar.php in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including 1 Joomla! 1.5.0 Beta, 2 N/X Web Content Management System WCMS 4.5, 3 CJG EXPLORER PRO 3.3, and 4...

CVE-2007-2199

PHP remote file inclusion vulnerability in lib/pcltar.lib.php aka pcltar.php in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConcept Library, as used in multiple products including 1 Joomla! 1.5.0 Beta, 2 N/X Web Content Management System WCMS 4.5, 3 CJG EXPLORER PRO 3.3, and 4...

CVE-2007-2199

Summary: CVE-2007-2199 is a PHP remote file inclusion vulnerability in the PclTar module (lib/pcltar.lib.php, aka pcltar.php), impacting PclTar module versions 1.3 and 1.3.1 and several products using it, including Joomla! 1.5.0 Beta, N/X WCMS 4.5, CJG EXPLORER PRO 3.3, and phpSiteBackup 0.1. Roo...

CVE-2007-2106

Directory traversal vulnerability in index.php in Kai Content Management System K-CMS 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currenttheme parameter...

[MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue

MajorSecurity Advisory 45oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue Details ======= Product: oe2edit CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.oe2edit.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Dav...

Microsoft Content Management Server fails to properly process crafted HTTP requests

Overview A vulnerability in the way Microsoft Content Managment Server handles HTTP requests may lead to execution of arbitrary code. Description Microsoft Content Managment Server CMS contains a vulnerability that could be exploited when it attempts to process specially crafted HTTP requests...

CVE-2007-1984

PHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

PT-2007-3332 · Phpecho · Phpecho Cms

Name of the Vulnerable Software and Affected Versions: PHPEcho CMS version 2.0 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the plugin file parameter to "smarty/internals/core.load pulgins.php" or the root path parameter t...

pL-PHP beta 0.9 - Multiple Vulnerabilities

. . . . | . .| . .;/ || .| .net | .| "pL-PHP beta 0.9 - MULTIPLE VULNERABILITIES" by Omni 1 Infos --------- Date : 2007-04-10 Product : pL-PHP Version : beta 0.9 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/pl-php/ - http://www.karlcore.com/programming/blog/...

MS07-018: Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

The remote host contains a version of the Microsoft Content Management Server that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code by sending a specially malformed HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-0938

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

Memory corruption

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

CVE-2007-0939

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

CVE-2007-0939

Cross-site scripting XSS vulnerability in Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving HTML redirection queries, aka "Cross-site Scripting and Spoofing Vulnerability."...

CVE-2007-0938

CVE-2007-0938 describes a remote code execution vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2, caused by improper handling of certain characters in crafted HTTP requests. The CMS Memory Corruption vulnerability could allow an attacker to take control of an affe...

CVE-2007-0938

Microsoft Content Management Server MCMS 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request, which allows remote attackers to execute arbitrary code, aka the "CMS Memory Corruption Vulnerability."...

CVE-2007-0939

CVE-2007-0939 is an XSS vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2. The issue arises from MCMS not fully validating input in HTML redirect queries, allowing remote attackers to inject script or HTML that runs in a user’s browser. Exploitation requires user i...