CVE-2008-6674

mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter...

CVE-2008-6677

In CVE-2008-6677, Unrestricted file upload in QuickerSite 1.8.5 (fckeditor251/editor/filemanager/connectors/asp/upload.asp) allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request. This is supported by multiple ...

CVE-2008-6675

CVE-2008-6675 affects QuickerSite 1.8.5 with multiple reflected XSS vectors. The vulnerabilities arise in (1) showThumb.aspx via the close parameter, (2) process_send.asp via SB_redirect and SB_feedback as reachable through default.asp, (3) picker.asp via paramCode and cColor, and (4) rss.asp via...

CVE-2008-6678

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6676

QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message...

CVE-2008-6675

Multiple cross-site scripting XSS vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the close parameter to showThumb.aspx; 2 SBredirect and 3 SBfeedback parameters in processsend.asp, as reachable through default.asp; 4 paramCode and 5 cColor...

CVE-2008-6673

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

CVE-2008-6676

CVE-2008-6676 affects QuickerSite 1.8.5. Affected component: showThumb.aspx (no parameters) allows remote attackers to obtain sensitive information by triggering an error message that reveals the installation path. Root cause is error disclosure in showThumb.aspx, leading to partial confidentiali...

CVE-2008-6674

CVE-2008-6674 concerns mailPage.asp in QuickerSite 1.8.5 . The vulnerability lets remote attackers flood email accounts by issuing a large number of requests with a modified sEmail parameter. The public records describe this as a parameter tampering/abuse issue leading to message floods, with the...

CVE-2008-6677: Improper Control of Generation of Code

Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2008-6676: Improper Input Validation

QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any parameters, which reveals the installation path in an error message...

CVE-2008-6675: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the close parameter to showThumb.aspx; 2 SBredirect and 3 SBfeedback parameters in processsend.asp, as reachable through default.asp; 4 paramCode and 5 cColor...

CVE-2008-6678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrary SQL commands via the sNickName parameter in a profile action to default.asp...

CVE-2008-6673: Undefined Security Weakness

asp/bslogin.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to 1 change the admin password via the cSaveAdminPW action; 2 modify site information, such as the contact address, via the saveAdmin; and 3 modify the site design...

CVE-2008-6674: Undefined Security Weakness

mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of requests with a modified sEmail parameter...

QuickerSite Easy CMS Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE DISCLOSURE=--...

QuickerSite Easy CMS (QuickerSite.mdb) Database Disclosure Vulnerability

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE...

QuickerSite Easy CMS (QuickerSite.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== QuickerSite Easy CMS QuickerSite.mdb Database Disclosure Vulnerability ========================================================================...

QuickerSite Easy CMS - Database Disclosure

QuickerSite Easy CMS - Database Disclosure -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits :...

QuickerSite Easy CMS - Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : QuickerSite Easy CMS download : null Demo : http://cupofcoffee.quickersite.com/ Exploits : --=DATABASE DISCLOSURE=--...