77 matches found
CVE-2006-3904
Etomite CMS
Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content...
Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)
Exploit for unknown platform in category web applications ================================================================ Etomite CMS = 0.6.1 username SQL Injection Exploit mq = off ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo "Etomi...
Etomite CMS <= 0.6.1 (rfiles.php) Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 'rfiles.php' remote command execution\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...
Etomite CMS 0.6.1 - rfiles.php Remote Command Execution
Etomite CMS 0.6.1 - rfiles.php Remote Command Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
Etomite CMS <= 0.6.1 (rfiles.php) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== Etomite CMS = 0.6.1 rfiles.php Remote Command Execution Exploit ================================================================== !/usr/bin/php -q -d shortopentag=on ? ech...
Etomite CMS 0.6.1 - Username SQL Injection (mq off)
Etomite CMS 0.6.1 - Username SQL Injection mq off !/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google...
Etomite CMS 0.6.1 - 'rfiles.php' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $e...
Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)
!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...
Etomite followup information
---------- Forwarded message ---------- From: Rick Elnor To: [email protected] Date: Sun, 29 Jan 2006 10:11:08 -0800 Subject: OSVDB Mods Change Request 22693: Etomite todo.inc.php cij Variable Arbitrary Command Execution Hello, I am Rick Elnor, the Etomite CMS security expert and owner ow...
Etomite CMS "Backdoored"
/ Package: Etomite Content Management System Auth: http://www.etomite.org/ Versions: 0.6 / previous versions may also be backdoored Vulnerability Type: Remote Code Execution / Disclaimer: --------- The information is provided "as is" without warranty of any kind. The author of this issue shall no...
CVE-2006-0325
Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...
Design/Logic Flaw
Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...
CVE-2006-0325
Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...
CVE-2006-0325
Summary of CVE-2006-0325 (Etomite CMS) : Etomite Content Management System version 0.6 (and possibly earlier) downloaded from the official site in January 2006 after January 10, contains a back door in the file path manager/includes/todo.inc.php. This back door allows remote attackers to execute ...
[SA18556] Etomite "cij" Shell Command Execution Backdoor Security Issue
TITLE: Etomite "cij" Shell Command Execution Backdoor Security Issue SECUNIA ADVISORY ID: SA18556 VERIFY ADVISORY: http://secunia.com/advisories/18556/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Etomite 0.x http://secunia.com/product/6896/ DESCRIPTION: Luca Ercol...
CSS в etomite v0.6
SVadvisory10 title: CSS в etomite v0.6 programm: etomite v0.6 site: http://www.etomite.org/ found: 9.07.2005 ------------------------------------------------------------------------------------------------- О портале: Эта портальная система не так популярна как PHP-NUKE, и поэтому этот портал...