EUVD-2009-1408

Malware in sbrugna...

EUVD-2006-5818

Malware in sbrugna...

EUVD-2008-4122

Malware in sbrugna...

Quick.Cms.Lite <= 0.3 (Cookie sLanguage) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

CVE-2009-4121

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-4121: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for requests that 1 delete web pages via a p-delete action to admin.php, and possibly 2 delete products or 3 delete orders via...

CVE-2009-1410

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1410

The CVE-2009-1410 issue concerns Quick.Cms.Lite 0.5 where an SQL injection vulnerability exists in index.php, exploitable via the id parameter to execute arbitrary SQL commands. Affected component: Quick.Cms.Lite 0.5; vulnerability originates from unsafely handled id input in index.php. Reported ...

CVE-2009-1410

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1410: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4139

Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

[NOBYTES.COM: #14] Quick.Cms.Lite v2.1 Freeware - Cross Site Scripting

Application: Quick.Cms.Lite v2.1 Freeware Authors Site: http://opensolution.org/quick.cms,en,10.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"scriptalertdocument.cookie/script"...

CVE-2008-4139

Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2008-4139

CVE-2008-4139 describes a Cross-site Scripting (XSS) vulnerability in OpenSolution Quick.Cms.Lite 2.1, specifically in admin.php, where an attacker can inject arbitrary script/HTML via the query string. The available sources confirm the affected component but do not provide details on root cause ...

CVE-2008-4139: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string...

quickcmslite-xss.txt

Application: Quick.Cms.Lite v2.1 Freeware Authors Site: http://opensolution.org/quick.cms,en,10.html +--------------------------------------------------------------+ XSS: http://www.victim.com/admin.php?"alertdocument.cookie" +-Notes:-----------------------------------------------------+ This onl...

Quick CMS Lite 2.1 - admin.php Cross-Site Scripting

Quick CMS Lite 2.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31210/info Quick.Cms.Lite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script co...