CVE-2009-3425

Directory traversal vulnerability in includes/inc.thcmsadmindirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMSroot parameter...

CVE-2009-3424

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 isprojectPath parameter to includes/InstantSite/inc.isroot.php; GLOBALSthCMSroot parameter to 2 classes/class.Tree.php, 3...

CVE-2009-3424

CVE-2009-3424 affects MaxCMS 3.11.20b: multiple remote file inclusion vulnerabilities when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying URLs in a set of 34 parameters across various files (e.g., includes/InstantSite/inc.is_root.php; classes/...php; ...

CVE-2009-3425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/inc.thcmsadmindirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMSroot parameter...

CVE-2009-3426: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/filemanager/special.php in MaxCMS 3.11.20b allows remote attackers to execute arbitrary PHP code via a URL in the fmincludesspecial parameter...

CVE-2009-3424: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in MaxCMS 3.11.20b, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 isprojectPath parameter to includes/InstantSite/inc.isroot.php; GLOBALSthCMSroot parameter to 2 classes/class.Tree.php, 3...

MAXcms 3.11.20b Remote File Inclusion / Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

MAXcms 3.11.20b Remote File Inclusion

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

No description provided by source. MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" -------!! 23: readfile$thCMSroot."/includes/wzdragdrop.js";-------!! 24: exit; 25: POC :...

MAXcms 3.11.20b - Remote File Inclusion File Disclosure

MAXcms 3.11.20b - Remote File Inclusion File Disclosure MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC :...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosu...

MAXcms 3.11.20b - Remote File Inclusion / File Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities ==============================================================...

MAXcms 3.11.20b - Multiple Remote File Inclusions

MAXcms 3.11.20b - Multiple Remote File Inclusions =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version...

MAXcms 3.11.20b - Multiple Remote File Inclusions

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...

MAXcms 3.11.20b Multiple Remote File Inclusion Vulnerabilities

No description provided by source. =============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendo...

Sql injection

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...

CVE-2009-1818

CVE-2009-1818 affects MaxCMS 2.0, where the admin/admin_manager.asp component is vulnerable to SQL injection via an m_username cookie in the add action. The underlying flaw allows remote attackers to execute arbitrary SQL commands with the potential to impact data. Public references confirm a wor...

CVE-2009-1818

SQL injection vulnerability in admin/adminmanager.asp in MaxCMS 2.0 allows remote attackers to execute arbitrary SQL commands via an musername cookie in an add action...