Exponent CMS v0.97 Multiple Vulnerabilities

No description provided by source. Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local Fi...

Exponent CMS v0.97 Multiple Vulnerabilities

Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...

Exponent CMS v0.97 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Exponent CMS v0.97 Multiple Vulnerabilities =========================================== Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source...

Exponent CMS 0.97 Cross Site Scripting / File Disclosure / Local File Inclusion / Shell Upload

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

Exponent CMS 0.97.0 Cross Site Scripting

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

Exponent CMS 0.97 - Slideshow.js.php Cross-Site Scripting

Exponent CMS 0.97 - Slideshow.js.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Exponent CMS 0.97 - 'Slideshow.js.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41447/info Exponent CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

CVE-2009-4744

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-4744

The CVE-2009-4744 entry describes a cross-site scripting (XSS) vulnerability in the Contact module of Exponent CMS 0.97-GA20090213, exploitable via the email parameter to inject arbitrary script/HTML. The issue is remote in nature and could allow user-interface manipulation through crafted input....

CVE-2009-4744

Cross-site scripting XSS vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Exponent CMS 0.96.3 SQL Injection

Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Download Script: http://www.exponentcms.org/install/upgrades/exponent-0.97.0-Beta20080611.zip Dork: "Welcome to...

Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability

No description provided by source. Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site" inurl:articlemodule ==...

Exponent CMS 0.96.3 (articlemodule) Sql Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability =============================================================== Script : exponentcms Dork: "Welcome to Exponent...

Exponent CMS 0.96.3 - articlemodule SQL Injection

Exponent CMS 0.96.3 - articlemodule SQL Injection Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site"...

Exponent CMS 0.96.3 - 'articlemodule' SQL Injection

Exponent CMS 0.96.3 articlemodule Sql Injection Vulnerability ======================================================== Author : T u R c O Home : www.1923Turk.com Script : exponentcms Dork: "Welcome to Exponent CMS" | "my new exponent site" inurl:articlemodule === Exploit ===...

CVE-2008-1972

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 firstname, 3...