CVE-2005-4219

setting.php in Innovative CMS ICMS, formerly Imoel-CMS contains username and password information in cleartext, which might allow attackers to obtain this information via a direct request to setting.php. NOTE: on a properly configured web server, it would be expected that a .php file would be...

CVE-2005-4219

CVE-2005-4219 affects Innovative CMS (ICMS, formerly Imoel-CMS). The setting.php page reportedly returns cleartext username and password information, potentially allowing an attacker to obtain credentials via a direct request. The NVD entry assigns a base CVSS v2 of 5.0 (Medium): Attack Vector Ne...

CVE-2005-3574

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

CVE-2005-3574

CVE-2005-3574 affects iCMS (PHP) via index.php. The vulnerability allows remote attackers to include arbitrary files through the page parameter, enabling a network-based attack with no authentication. The CVSSv2 base metrics in the provided data indicate a MEDIUM severity, with partial confidenti...

CVE-2005-3574

PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter...

iCMS Remote File Include Vulnerability

iCMS Remote File Include Vulnerability Author: r0t hackers.by.lv Date: 14. nov 2005 software:iCMS vendor:http://www.cogilent.com/ software description: iCMS is an interactive Web Content Management System. The purpose of this product is to facilitate organizations that require power solutions to...