CVE-2012-6038

admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...

Path traversal

admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...

CVE-2012-6038

The CVE-2012-6038 entry concerns razorCMS prior to 1.2.1 where admin/core/admin_func.php fails to restrict access to certain administrator directories/files. The vulnerability enables remote authenticated users to read, edit, rename, move, copy and delete files through (1) the dir parameter in fi...

CVE-2012-6038

admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...

CVE-2012-6038: Improper Limitation of a Pathname to a Restricted Directory

admin/core/adminfunc.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the 1 dir parameter in a fileman or 2 filemanview action. NOTE: this...

CVE-2012-5918

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

Directory traversal

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

CVE-2012-5918

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

CVE-2012-5918

CVE-2012-5918 affects razorCMS 1.2, where remote authenticated users can access administrator directories and files by creating and deleting a directory, indicating a directory traversal / improper path handling vulnerability. The connected records corroborate the same description; no explicit mi...

CVE-2012-5918: Undefined Security Weakness

razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory...

CVE-2012-1900

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

CVE-2012-1900

CVE-2012-1900 affects RazorCMS 1.2.1 and earlier. The vulnerability is a Cross-Site Request Forgery in admin/index.php that lets remote attackers hijack an administrator’s session to perform showcats actions that delete arbitrary web pages. Root cause: CSRF in the admin interface enabling unautho...

CVE-2012-1900

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

CVE-2012-1900: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary web pages via a showcats action...

RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)

Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS body onload="javascrip...

RazorCMS <= 1.2.1 STABLE File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: RazorCMS /datastore/webshell.php 0day.today 2018-02-17...

RazorCMS 1.2.1 STABLE Shell Upload

Exploit Title: RazorCMS /datastore/webshell.php...

RazorCMS 1.2.1 STABLE - Arbitrary File Upload

Exploit Title: RazorCMS /datastore/webshell.php...

RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages)

+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS CSRF Exploit to add ADMIN account/H2...