CVE-2006-6387

Multiple SQL injection vulnerabilities in LINK Content Management Server CMS allow remote attackers to execute arbitrary SQL commands via the 1 IDMeniGlavni parameter to navigacija.php, and the 2 IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is...

CVE-2006-6387

Multiple SQL injection vulnerabilities in LINK Content Management Server CMS allow remote attackers to execute arbitrary SQL commands via the 1 IDMeniGlavni parameter to navigacija.php, and the 2 IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is...

CVE-2006-6387: Undefined Security Weakness

Multiple SQL injection vulnerabilities in LINK Content Management Server CMS allow remote attackers to execute arbitrary SQL commands via the 1 IDMeniGlavni parameter to navigacija.php, and the 2 IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is...

CVE-2006-6388: Undefined Security Weakness

Cross-site scripting XSS vulnerability in naprednaPretraga.php in LINK Content Management Server CMS allows remote attackers to inject arbitrary web script or HTML via the txtPretraga parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

QuestCMS (main.php) Remote File Include Vulnerability

No description provided by source. !!!!!!!!!WWW.SERSAVASCAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author:...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

CVE-2006-6110: Undefined Security Weakness

Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the 1 vjob parameter in publicationslist.asp or 2 InfoID parameter in publicationview.asp...

a-ConMan 3.2b - common.inc.php Remote File Inclusion

a-ConMan 3.2b - common.inc.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...

Etomite CMS 0.6.1.2 Vulnerabilities + ContenNow 1.39 Vulnerabilities + Exploits

Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' Secunia Advisory : SA22885 Security Focus BID : 21135 -------------------------------------------------- Description Etomite is a PHP Content Management System, more info...

a-ConMan 3.2b - 'common.inc.php' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...

[MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues

MajorSecurity Advisory 36dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues Details ======= Product: dev4u CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.dev4u.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

BPG Content Management System SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC:...

bpg.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC: http://target/path/publicationview.asp?InfoID=SQL CODE...

Update Protection against phpFullAnnu 'repmod' parameter File Inclusion Vulnerability

phpFullAnnu, a content management system portal application, is prone to a remote file inclusion vulnerability. An attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system via a maliciously crafted URL in the 'repmod' parameter...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- +...

iWare Pro 5.0.4 - chat_panel.php Remote Code Execution

iWare Pro 5.0.4 - chatpanel.php Remote Code Execution +------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare...

iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================================= iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does...

iWare Pro 5.0.4 - 'chat_panel.php' Remote Code Execution

+------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare admin/mods/simplechat1.0.0/chatpanel.php does not sanatize the $message variable...

drakeCMS.txt

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: Windows\Linux\Unix -=+...