CVE-2018-12995

OneFileCMS is affected by CVE-2018-12995 through its onefilecms.php file. The vulnerability enables arbitrary PHP code execution by submitting a .php filename on the Upload screen, affecting versions up to 2012-04-14. The root cause is improper handling of uploaded filenames, allowing execution o...

CVE-2018-12993

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to conduct brute-force attacks via the onefilecmsusername and onefilecmspassword fields...

CVE-2018-12993

CVE-2018-12993 affects OneFileCMS (OneFileCMS) via onefilecms.php up to 2012-04-14, enabling brute-force attempts through the onefilecms_username and onefilecms_password fields. The connected CNVD/NVD records corroborate a brute-force vulnerability in OneFileCMS versions prior to or dated 2012-04...

CVE-2018-12993: Improper Restriction of Excessive Authentication Attempts

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to conduct brute-force attacks via the onefilecmsusername and onefilecmspassword fields...

CVE-2018-12994: Improper Control of Generation of Code

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen...

CVE-2018-12995: Improper Control of Generation of Code

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...

OneFileCMS 1.1.5 - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability Google Dork: -- Date: 16/03/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: https://github.com/rocktronica/OneFileCMS Version:...

onefilecms 1.1.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: OneFileCMS v.1.1.1 Multiple Remote Vulnerabilities Google Dork: -- Date: 21/8/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: http://onefilecms.com/download/onefilecmssitev1.1.1.zip Versio...

OneFileCMS - Failure to Restrict URL Access

No description provided by source. Exploit Title: OneFileCMS - Failure to Restrict URL Access Date: 12th March 2012 Author: Abhi M Balakrishnan Software Link: https://raw.github.com/rocktronica/OneFileCMS/f265961d0646890c9efe05b93983124abc18c56e/onefilecms.php Version: upto 1.1.4 Tested on:...

OneFileCMS - Failure to Restrict URL Access

OneFileCMS - Failure to Restrict URL Access Exploit Title: OneFileCMS - Failure to Restrict URL Access Date: 12th March 2012 Author: Abhi M Balakrishnan Software Link: https://raw.github.com/rocktronica/OneFileCMS/f265961d0646890c9efe05b93983124abc18c56e/onefilecms.php Version: upto 1.1.4 Tested...

OneFileCMS - Failure to Restrict URL Access

Exploit Title: OneFileCMS - Failure to Restrict URL Access Date: 12th March 2012 Author: Abhi M Balakrishnan Software Link: https://raw.github.com/rocktronica/OneFileCMS/f265961d0646890c9efe05b93983124abc18c56e/onefilecms.php Version: upto 1.1.4 Tested on: Apache-2.2.17, PHP-5.2.17, MySQL-5.5.9,...

OneFileCMS 1.1.5 Local File Inclusion

Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability Google Dork: -- Date: 16/03/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: https://github.com/rocktronica/OneFileCMS Version: OneFileCMS v.1.1.5 Tested on: Linux Fedora...

OneFileCMS v.1.1.5 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability Google Dork: -- Date: 16/03/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: https://github.com/rocktronica/OneFileC...

OneFileCMS 1.1.5 - Local File Inclusion

Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability Google Dork: -- Date: 16/03/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: https://github.com/rocktronica/OneFileCMS Version: OneFileCMS v.1.1.5 Tested on: Linux Fedora...

OneFileCMS 1.1.5 - Local File Inclusion

OneFileCMS 1.1.5 - Local File Inclusion Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability Google Dork: -- Date: 16/03/2012 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: https://github.com/rocktronica/OneFileCMS Version:...

OneFileCMS - Failure to Restrict URL Access

Exploit for php platform in category web applications Exploit Title: OneFileCMS - Failure to Restrict URL Access | Date: 12th March 2012 | Author: Abhi M Balakrishnan | Software Link: https://github.com/rocktronica/OneFileCMS/blob/4340be5355b702c771ef03d4b00c74d358443b38/onefilecms.php | Version:...

OneFileCMS 1.1.4 Access Bypass

Exploit Title: OneFileCMS - Failure to Restrict URL Access | Date: 12th March 2012 | Author: Abhi M Balakrishnan | Software Link: https://github.com/rocktronica/OneFileCMS/blob/4340be5355b702c771ef03d4b00c74d358443b38/onefilecms.php | Version: upto 1.1.4 | Tested on: Apache-2.2.17, PHP-5.2.17,...

OneFileCMS 1.1.1 Code Execution

!/usr/bin/perl Exploit Title: OneFileCMS v.1.1.1 Remote Code Execution Exploit Date: 22/8/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: http://onefilecms.com/download/onefilecmssitev1.1.1.zip Version: OneFileCMS v.1.1.1 Tested on: Linux...

OneFileCMS 1.1.1 - Multiple Vulnerabilities

Exploit Title: OneFileCMS v.1.1.1 Multiple Remote Vulnerabilities Google Dork: -- Date: 21/8/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Software Link: http://onefilecms.com/download/onefilecmssitev1.1.1.zip Version: OneFileCMS v.1.1.1 Tested on:...

OneFileCMS 1.1.1 - onefilecms.php Cross-Site Scripting

OneFileCMS 1.1.1 - onefilecms.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49257/info OneFileCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may...