77 matches found
CVE-2006-6048
SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6047
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then...
Etomite CMS 0.6.1.2 Vulnerabilities + ContenNow 1.39 Vulnerabilities + Exploits
Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' Secunia Advisory : SA22885 Security Focus BID : 21135 -------------------------------------------------- Description Etomite is a PHP Content Management System, more info...
CVE-2006-6047
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then...
CVE-2006-6047
Etomite 0.6.1.2 is affected by a directory traversal vulnerability in manager/index.php. Remote authenticated administrators can include and execute arbitrary local files by supplying a .. in the f parameter, demonstrated by injecting PHP sequences into an Apache log file that index.php then incl...
CVE-2006-6048
SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6048
Affected software: Etomite CMS (version 0.6.1.2). Vulnerability: SQL injection in the index.php script via the id parameter when magic_quotes_gpc is disabled. The issue allows an unauthenticated remote attacker to manipulate SQL queries and potentially access sensitive data or data within the dat...
etm_0612_sqlinj.pl.txt
!/usr/bin/perl -w use IO::Socket; use strict; Etomite CMS "id" SQL Injection Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: The "id" parameter isn't properly sanitised before being returned in sql query and can be used to inject craft SQL queries, we c...
etm_0612_remote_com.pl.txt
!/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in "/manager/index.php" isn't properly verified before being used in an include function, this can be exploited to...
Etomite CMS <= 0.6.1.2 (manager/index.php) Local File Include Exploit
No description provided by source. !/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in "/manager/index.php" isn't properly verified before being used in an include...
Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' -------------------------------------------------- Description Etomite is a PHP Content Management System, more info can be...
Etomite CMS 0.6.1.2 - managerindex.php Local File Inclusion
Etomite CMS 0.6.1.2 - managerindex.php Local File Inclusion !/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in "/manager/index.php" isn't properly verified before...
Etomite CMS <= 0.6.1.2 (manager/index.php) Local File Include Exploit
Exploit for unknown platform in category web applications ===================================================================== Etomite CMS newProto="tcp", PeerAddr="$target", PeerPort="80" or die "\n Could not connect to host\n\n"; my $req =...
Etomite CMS 0.6.1.2 - '/manager/index.php' Local File Inclusion
!/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in "/manager/index.php" isn't properly verified before being used in an include function, this can be exploited to...
CVE-2006-5242
SQL injection vulnerability in Etomite Content Management System CMS before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2006-5242
SQL injection vulnerability in Etomite Content Management System CMS before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2006-5242
CVE-2006-5242 is a SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1. Remote attackers can execute arbitrary SQL commands via unspecified vectors. The connected sources confirm the affected product and version range, but provide no exploit details or remediatio...
etomiteCMS-061-SQL.txt
!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...
CVE-2006-3904
SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-3904
SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...