127 matches found
RazorCMS 1.2.1 STABLE Cross Site Request Forgery
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS CSR...
RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages)
RazorCMS 1.2.1 Stable - Cross-Site Request Forgery Delete Web Pages +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS body onload="ja...
RazorCMS 1.2.1 STABLE - Arbitrary File Upload
RazorCMS 1.2.1 STABLE - Arbitrary File Upload Exploit Title: RazorCMS /datastore/webshell.php...
razorCMS 1.2 path traversal-vulnerability warning-the black bar safety net
Title: razorCMS 1.2 Path Traversal Author: chap0 Download address: http://www.razorcms.co.uk/archive/core/ Affected version: 1.2 Test platform: Ubuntu Patches: Upgrade to latest release 1.2.1 RazorCMS is vulnerable to Path Traversal, when logged in with a least privileged user account the user ca...
razorCMS 1.2 Path Traversal
Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...
RazorCMS 1.2 - Directory Traversal
RazorCMS 1.2 - Directory Traversal Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is...
razorCMS 1.2 Path Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1...
RazorCMS 1.2 - Directory Traversal
Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...
CVE-2010-5051
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...
CVE-2010-5051
The CVE-2010-5051 entry describes a Cross-Site Scripting (XSS) vulnerability in razorCMS 1.0 stable, specifically in admin/core/admin_func.php where the content parameter used in an edit action to admin/index.php can be exploited to inject arbitrary script/HTML. This is triggered via crafted inpu...
CVE-2010-5051: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...
RazorCMS 1.0 - adminindex.php HTML Injection
RazorCMS 1.0 - adminindex.php HTML Injection source: https://www.securityfocus.com/bid/40373/info razorCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected...
RazorCMS 1.0 - '/admin/index.php' HTML Injection
source: https://www.securityfocus.com/bid/40373/info razorCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to ste...
Cross-site Scripting Vulnerability in razorCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in razorCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in razorCMS: CVE-2010-5051 The vulnerability exists due to input sanitation error in the "content" paramete...
CVE-2009-1459
Cross-site request forgery CSRF vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code...
CVE-2009-1460
razorCMS before 0.4 uses weak permissions for 1 admin/core/adminconfig.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and 2 the root directory, 3 datastore/, and 4 admin/core/, which allows local users to have an unspecified impact...
CVE-2009-1461
Cross-site scripting XSS vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field...
CVE-2009-1458
Multiple cross-site scripting XSS vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the slab parameter in an edit action, 2 the catname parameter in a showcats action, and 3 the cat parameter in a reordercat action...