16 matches found
EUVD-2011-3167
Malware in sbrugna...
EUVD-2011-3166
Malware in sbrugna...
CVE-2011-3202
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
CVE-2011-3203
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...
Remote code execution
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...
CVE-2011-3202
CVE-2011-3202 is a Cross-Site Scripting (XSS) vulnerability in the g parameter to index.php in Jcow CMS 4.2 and earlier. The provided documents describe the vulnerability but do not specify a patch or fixed version. Exploitation details are not provided beyond the XSS condition. No mitigations ar...
CVE-2011-3202
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
CVE-2011-3203
CVE-2011-3203 affects JCow CMS versions 4.x up to 4.2 and 5.2 up to 5.2, where the attachment parameter passed to index.php enables a Code Execution vulnerability. The root cause is a flaw in processing the attachment parameter that can be exploited to achieve arbitrary code execution. Public ref...
CVE-2011-3203
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...
CVE-2011-3203: Improper Input Validation
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2...
CVE-2011-3202: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier...
Jcow CMS 4.2 <= | Cross Site Scripting
Jcow CMS 4.2 = | Cross Site Scripting 1. OVERVIEW Jcow CMS 4.2 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Jcow is a flexible Social Networking software written in PHP. It can help you to build a social network for your interests and passions, a member community for...
Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution
Jcow CMS 4.x:4.2 = , 5.x:5.2 = | Arbitrary Code Execution 1. OVERVIEW Jcow CMS versions 4.x: 4.2 and lower, 5.x: 5.2 and lower are vulnerable to Arbitrary Code Execution. 2. BACKGROUND Jcow is a flexible Social Networking software written in PHP. It can help you to build a social network for your...
Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)
Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote Command Execution', 'Description' = %q This module exploit...
