CVE-2009-3424

CVE-2009-3424 affects MaxCMS 3.11.20b: multiple remote file inclusion vulnerabilities when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying URLs in a set of 34 parameters across various files (e.g., includes/InstantSite/inc.is_root.php; classes/...php; ...

CVE-2009-3426

CVE-2009-3426 concerns a PHP remote file inclusion in MaxCMS 3.11.20b. The flaw is in includes/file_manager/special.php, where the fm_includes_special parameter can be controlled to include a remote PHP file, enabling arbitrary code execution on the server. Documented affected component: MaxCMS 3...

CVE-2009-3425

CVE-2009-3425 affects MaxCMS 3.11.20b. A directory traversal flaw in the admin component, specifically includes/inc.thcms_admin_dirtree.php, allows remote attackers to read arbitrary files via traversal sequences in the thCMS_root parameter. Public references (NVD, CVE records) confirm the vulner...

MAXcms 3.11.20b Remote File Inclusion / Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

MAXcms 3.11.20b Remote File Inclusion

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

No description provided by source. MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" -------!! 23: readfile$thCMSroot."/includes/wzdragdrop.js";-------!! 24: exit; 25: POC :...

MAXcms 3.11.20b - Remote File Inclusion / File Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

MAXcms 3.11.20b - Remote File Inclusion File Disclosure

MAXcms 3.11.20b - Remote File Inclusion File Disclosure MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC :...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosu...

MAXcms 3.11.20b - Multiple Remote File Inclusions

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...

MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities ==============================================================...

MAXcms 3.11.20b - Multiple Remote File Inclusions

MAXcms 3.11.20b - Multiple Remote File Inclusions =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version...

MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities

No description provided by source. =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendo...

CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

Sql injection

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1818

CVE-2009-1818 affects MaxCMS 2.0, where the admin/admin_manager.asp component is vulnerable to SQL injection via an m_username cookie in the add action. The underlying flaw allows remote attackers to execute arbitrary SQL commands with the potential to impact data. Public references confirm a wor...

CVE-2009-1764

SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action...

Sql injection

SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action...

CVE-2009-1764

SQL injection vulnerability in inc/ajax.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a digg action...