Unfixed XSS vulnerability at www.gisti.org

Security researcher The Rat, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.gisti.org, which at the time of submission ranked 512235 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is currently...

The Rat CMS Alpha 2 - Authentication Bypass

--------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND userpassword = PASSWORD'$password'"; $result...

The Rat Cms Alpha 2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= The Rat Cms Alpha 2 Auth Bypass SQL Injection Vulnerability ============================================================= --------------------------------- The Rat Cms Auth By...

The Rat CMS Alpha 2 Privilege Escalation

---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0 ---------------------------- Bug In: /admin/.php So...

The Rat Cms Alpha 2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND...

The Rat CMS Alpha 2 - Authentication Bypass

The Rat CMS Alpha 2 - Authentication Bypass --------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND...

The Rat Cms Alpha 2 (download.php) Remote Vulnerability

No description provided by source. ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0...

The Rat CMS Alpha 2 - 'download.php' Priviledge Escalation

---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download: http://downloads.sourceforge.net/the-rat-cms/trcmsprealpha2.zip?modtime=1174590953&bigmirror=0 ---------------------------- Bug In: /admin/.php So...

The Rat CMS Alpha 2 - download.php Priviledge Escalation

The Rat CMS Alpha 2 - download.php Priviledge Escalation ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation ---------------------------- Autore: x0r Email: [email protected] Download:...

The Rat Cms Alpha 2 (download.php) Remote Vulnerability

Exploit for unknown platform in category web applications ======================================================= The Rat Cms Alpha 2 download.php Remote Vulnerability ======================================================= ---------------------------- The Rat Cms Alpha 2 Priviledge Escalation...

CVE-2008-5163

Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewarticle.php and 2 viewarticle2.php...

Sql injection

Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewarticle.php and 2 viewarticle2.php...

CVE-2008-5163

Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewarticle.php and 2 viewarticle2.php...

CVE-2008-5164

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2008-5163

The Rat CMS Pre-Alpha 2 contains SQL injection vulnerabilities in the viewarticle.php and viewarticle2.php scripts. The root cause is unsafe handling of the id parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component: The Rat CMS Pre-Alpha 2 (web application). Im...

CVE-2008-5164

The CVE-2008-5164 entry describes multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2. The issues allow remote attackers to inject arbitrary web scripts or HTML via the (1) id parameter to viewarticle.php and viewarticle2.php and the (2) PATH_INFO to viewarticle.php. Th...

The Rat CMS - viewarticle2.php?id SQL Injection

The Rat CMS - viewarticle2.php?id SQL Injection source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

The Rat CMS - 'viewarticle.php?id' SQL Injection

source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities

========================================================== The Rat CMS SQL/XSS Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

The Rat CMS - viewarticle.php Multiple Cross-Site Scripting Vulnerabilities

The Rat CMS - viewarticle.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29959/info The Rat CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and cross-site scripting issues, because it fails to sufficiently...