Design/Logic Flaw

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 Oracle9i have unspecified impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, 4 OCS04, 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, and 9 OCS09 in the a Email Server component; 10...

CVE-2006-0276

Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 Oracle9i have unspecified impact and attack vectors, as identified by Oracle Vuln 1 OCS01, 2 OCS02, 3 OCS03, 4 OCS04, 5 OCS05, 6 OCS06, 7 OCS07, 8 OCS08, and 9 OCS09 in the a Email Server component; 10...

DDSN CMS Admin Panel SQL Injection Vulnerability

Web Site : http://www.ddsn.com and http://www.cm3cms.com Description : DDSN is an expert provider of professional services surrounding the science of content management: Design, information architecture, deployment, and integration. In addition we offer our own content management software: Our...

PT-2005-5443 · Fidra · Fidra Lighthouse Cms

Name of the Vulnerable Software and Affected Versions: Fidra Lighthouse CMS versions 1.1.0 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query string to the home page. The vendor disputes this...

Dev web management system <= 1.5 SQL injection / cross site scripting

---- Dev web management system = 1.5 SQL injection / cross site scripting ----- software: site: http://dev-wms.sourceforge.net/ description: "Dev is powerful and very flexible content management system for web portals.."...

Communique 4 XSS vuln.

Communique 4 XSS vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/communiqu-4-xss-vuln.html vendor:www.day.com/site/en/index.html affected version: 4 and prior Product Description: Communique 4 is the first native JCR JSR 170 standard complia...

Fatwire UpdateEngine 6.2 multiple XSS vuln.

Fatwire UpdateEngine 6.2 multiple XSS vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/fatwire-updateengine-62-multiple-xss.html vendor:http://www.fatwire.com/ affected version:6.2 and prior Product Description: UpdateEngine6 is a dynamic...

WAXTRAPP XSS vuln.

WAXTRAPP XSS vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/waxtrapp-xss-vuln.html vendor:http://www.waxtrapp.com affected version:3.0.x already tested on 3.0.1 and previous versions. Product Description: WAXTRAPP is a development platform...

Redakto WCMS multiple XSS vuln.

Redakto WCMS multiple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html vendor:http://computeroil.com/ affected version:3.2 and prior Product Description: With our Content Management System Redakto, you...

OpenCms XSS vuln.

OpenCms XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/opencms-xss-vuln.html vendor:http://www.opencms.org/ affected version:6.0.3 and prior Product Description: OpenCms is a professional level Open Source Website Content Management...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

CVE-2005-4361

Magnolia Content Management Suite 2.1 is affected by a cross-site scripting (XSS) vulnerability in search.html that allows an attacker to inject arbitrary script or HTML via the query parameter. The issue is described across multiple sources (NVD and CVE records) with the vulnerability specifical...

CVE-2005-4361

Cross-site scripting XSS vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

NQcontent V3 XSS vuln.

NQcontent V3 XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/nqcontent-v3-xss-vuln.html vendor:http://www.nqcontent.com/ affected version:V3 Professional Edition,V3 Enterprise Edition,V3 Comparison Matrix. Product Description: NQcontent ...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

Magnolia Search Module 2.1 - Cross-Site Scripting

Magnolia Search Module 2.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...

Hot Banana Web Content Management Suite 5.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15948/info Web Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...