CVE-2005-4390: Undefined Security Weakness

SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter...

ContentServ 3.0/3.1/4.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15956/info ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise th...

ContentServ 3.03.14.0 - index.php SQL Injection

ContentServ 3.03.14.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15956/info ContentServ is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

ContentServ 3.1 SQL inj.

ContentServ 3.1 SQL inj. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/contentserv-31-sql-inj.html vendor:http://www.contentserv.com/ affected version: 3.1 and prior Product Description: The ContentServ envelops more than simple Content...

CVE-2005-3086

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter...

CVE-2005-3086

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter...

CVE-2005-3086

CVE-2005-3086 affects ContentServ 3.1: the admin/about.php endpoint is vulnerable to directory traversal via the ctsWebsite parameter (using .. sequences), allowing remote attackers to read or include arbitrary files. This is publicly documented in NVD and corroborated by Red Hat and CVE listings...

CVE-2005-3086: Undefined Security Weakness

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via ".." sequences in the ctsWebsite parameter...

contentServ.txt

---------------------------------------------------------------------- -- ContentServ still features remote reading of arbitrary files -- ------------------------- [email protected] ------------------------ / Boring PHP bug warning: """""""""""""""""""""""""""""" By reading boring PHP bug...

[Full-disclosure] ContentServ features remote file disclosure

---------------------------------------------------------------------- -- ContentServ still features remote reading of arbitrary files -- ------------------------- [email protected] ------------------------ / Boring PHP bug warning: """""""""""""""""""""""""""""" By reading boring PHP bug...