Уязвимость в MaxSite Anti Spam Image

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в MaxSite Anti Spam Image. Это капча плагин для WordPress. Это переработанная версия оригинального плагина Anti Spam Image, об уязвимости в котором я писал в 2007 году в своём проекте MoBiC. Данная капча...

CVE-2008-6446

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...

Code injection

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...

CVE-2008-6446

The CVE concerns CMS MAXSITE’s Guestbook component where the message parameter enables static code injection, allowing remote PHP code execution. Affected: Guestbook functionality in MAXSITE (CMS). Root cause: insufficient input handling in the Guestbook message field leading to code execution. D...

CVE-2008-6446

Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter...

cmsmaxsite-exec.txt

!/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

CMS MAXSITE Component Guestbook - Remote Command Execution

CMS MAXSITE Component Guestbook - Remote Command Execution !/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ==================================================================...

CMS MAXSITE Component Guestbook Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================ CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================ !/usr/bin/perl...

CMS MAXSITE Component Guestbook - Remote Command Execution

!/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Sql injection

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487

CVE-2008-2487 is an SQL injection vulnerability in MAXSITE 1.10 and earlier, exploitable via the category parameter in a webboard action on index.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected product/version: MAXSITE 1.10 and earlier. Impact and risk: CVSS 2.0...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability

No description provided by source. CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" +...

cmsmaxsite-sql.txt

CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" + Exploit:...

CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= CMS MAXSITE = 1.10 category Remote SQL Injection Vulnerability ================================================================= + Author: Tesz + Home:...

CMS MAXSITE 1.10 - category SQL Injection

CMS MAXSITE 1.10 - category SQL Injection CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" ...

CMS MAXSITE 1.10 - 'category' SQL Injection

CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" + Exploit:...