N/X Web Content Management System 2002 Prerelease 1 - 'menu.inc.php?c_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously created file, located on an...

Microsoft Content Management Server 2001 - Cross-Site Scripting

Microsoft Content Management Server 2001 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5922/info Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains...

CSS on Microsoft Content Management Server

Hi, while doing a pen-test I found what seems a Cross Site Scriptting on Microsoft Content Management Server. On M$ words: "Microsoft® Content Management Server 2001 MSCMS is an enterprise Web content management system that enables companies to build, deploy, and maintain Internet, intranet, and...

Microsoft Content Management Server 2001 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/5922/info Microsoft Content Management Server 2001 is reported to be prone to cross-site scripting attacks. An attacker could construct a malicious link to a vulnerable host that contains arbitrary HTML and script code. If this link is visited by a web...

CVE-2002-0700

Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server MCMS 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL...

CVE-2002-0719

SQL injection vulnerability in the function that services for Microsoft Content Management Server MCMS 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files...

CVE-2002-0718

Web authoring command in Microsoft Content Management Server MCMS 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."...

Buffer overflows in Content Managment Server

Multipel buffer overflows...

Security Bulletin MS02-041: Unchecked Buffer in Content Management Server Could Enable Server Compromise (Q326075)

---------------------------------------------------------------------- Title: Unchecked Buffer in Content Management Server Could Enable Server Compromise Q326075 Date: 07 August 2002 Software: Microsoft Content Management Server Impact: Three vulnerabilities, the most serious of which could...

PostBoard 2.0 - BBCode IMG Tag Script Injection

PostBoard 2.0 - BBCode IMG Tag Script Injection source: https://www.securityfocus.com/bid/4559/info PostBoard is a freely available, open source message board module for the PostNuke content management system. It is designed for use on the Unix and Linux operating systems. PostBoard does not...

CVE-2001-0418

content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter...

CVE-2001-0418

The CVE-2001-0418 entry concerns the NCM Content Management System where the content.pl script is vulnerable to SQL injection through the id parameter. This allows remote attackers to read arbitrary contents from the content database. The available documents confirm the affected component (conten...

CVE-2001-0418

content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter...

Дырка в NCM Content Management System (SQL modification)

Используя ESC-символы можно модифицировать SQL-запрос...

Exploitable NCM.at - Content Management System

--------------------------------------------------------------------------- Possible Security Problem in NCM - Content Management System Package name: NCM Content Management System Severity: Possible direct access to database of content Date: 2001-04-10 Affected versions: ?, no information from t...

NCM Content Management System - content.pl Input Validation

NCM Content Management System - content.pl Input Validation source: https://www.securityfocus.com/bid/2584/info The NCM Content Management System is a product distributed by NCM. The NCM Content Management System is designed to manage web material and other data, and provide an interface to...

NCM Content Management System - content.pl Input Validation

source: https://www.securityfocus.com/bid/2584/info The NCM Content Management System is a product distributed by NCM. The NCM Content Management System is designed to manage web material and other data, and provide an interface to databases from web resources. A problem with the Content Manageme...

Security Update for Microsoft Content Management Server 2002 (KB924429)

This update corrects a security vulnerability in Microsoft Content Management Server 2002 Service Pack 2 that could enable a remote user to execute code on a computer that is running Content Management Server...

Security Update for Microsoft Content Management Server 2002 (KB924429) v2

This update corrects a security vulnerability in Microsoft Content Management Server 2002 Service Pack 2 that could enable a remote user to execute code on a computer that is running Content Management Server...