Sql injection

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

CVE-2015-1371

FerretCMS 1.0.4-alpha contains an Unrestricted file upload vulnerability that allows remote administrators to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to the file under custom/uploads/. The reports indicate the vulnerabilit...

CVE-2015-1371

Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in custom/uploads/...

CVE-2015-1372

SQL injection vulnerability in ferretCMS 1.0.4-alpha allows remote attackers to execute arbitrary SQL commands via the p parameter in an update action to admin.php...

CVE-2015-1372

CVE-2015-1372 affects ferretCMS 1.0.4-alpha. The vulnerability is a SQL injection in the update action of admin.php via the p parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is described as enabling data access/ modification with partial confidentiality, integrity, ...

CVE-2015-1373

The CVE-2015-1373 entry concerns ferretCMS 1.0.4-alpha, where multiple XSS vulnerabilities exist in admin.php. The attacker can inject arbitrary script/HTML through: (1) the action parameter in a search request, (2) the username in a login request that is not properly handled when logging the eve...

Multiple SQL Injection Vulnerabilities in FerretCMS

FerretCMS is a content management system. Multiple SQL injection vulnerabilities exist in FerretCMS, allowing attackers to exploit the vulnerabilities to compromise the application, access or modify data, or exploit potential vulnerabilities in the underlying database...

ferretCMS 1.0.4-alpha - Multiple Vulnerabilities

ferretCMS 1.0.4-alpha - Multiple Vulnerabilities Advisory: Advisory ID: SROEADV-2015-10 Author: Steffen Rösemann Affected Software: ferretCMS v. 1.0.4-alpha Vendor URL: https://github.com/JRogaishio/ferretCMS Vendor Status: vendor will patch eventually CVE-ID: - Tested on: - Firefox 35, Iceweasel...

ferretCMS 1.0.4-alpha - Multiple Vulnerabilities

Advisory: Advisory ID: SROEADV-2015-10 Author: Steffen Rösemann Affected Software: ferretCMS v. 1.0.4-alpha Vendor URL: https://github.com/JRogaishio/ferretCMS Vendor Status: vendor will patch eventually CVE-ID: - Tested on: - Firefox 35, Iceweasel 31 - Mac OS X 10.10, Kali Linux 1.0.9a...

ferretCMS 1.0.4-alpha Cross Site Scripting / SQL Injection Vulnerabilities

ferretCMS version 1.0.4-alpha suffers from cross site scripting and remote SQL injection vulnerabilities. Author: Steffen Rösemann Affected Software: ferretCMS v. 1.0.4-alpha Vendor URL: https://github.com/JRogaishio/ferretCMS Vendor Status: vendor will patch eventually CVE-ID: - Tested on: -...