EUVD-2008-4753

Malware in sbrugna...

EUVD-2008-4754

Malware in sbrugna...

EUVD-2008-4752

Malware in sbrugna...

questcms (xss/directory traversal/sql) Multiple Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact:...

CVE-2008-4773

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-4772

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...

CVE-2008-4774

Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...

Directory traversal

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. dot dot in the theme parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...

Sql injection

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...

CVE-2008-4773

CVE-2008-4773 describes a directory traversal vulnerability in QuestCMS, specifically in the file main/main.php, where an attacker can read arbitrary local files by manipulating the theme parameter with "..". Public sources (NVD/CVELIST/PRION) consistently identify QuestCMS as affected and confir...

CVE-2008-4772

CVE-2008-4772 describes an SQL injection vulnerability in QuestCMS, specifically in the file main/main.php where the parameter obj can be manipulated to execute arbitrary SQL commands by remote attackers. The NVD entry assigns a Base Score of 7.5 (High) with network access and no authentication r...

CVE-2008-4774

Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...

CVE-2008-4772

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...

CVE-2008-4773

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-4774

CVE-2008-4774 is a cross-site scripting (XSS) vulnerability in QuestCMS, exposed in main/main.php via the cx parameter. The issue allows remote attackers to inject arbitrary web script or HTML. NVD lists a MEDIUM severity (CVSS v2 base score 4.3) with network attack vector, no authentication, and...

CVE-2008-4772: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...

CVE-2008-4774: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...

Questcms (XSS/Directory Traversal/SQL) Multiple Remote Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact:...

CVE-2008-4773: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. dot dot in the theme parameter...