EUVD-2008-2677

Malware in sbrugna...

EUVD-2008-2674

Malware in sbrugna...

EUVD-2008-2676

Malware in sbrugna...

EUVD-2008-2675

Malware in sbrugna...

realm cms <= 2.3 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Authentication flaw

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2681

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

Information disclosure

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2679

CVE-2008-2679 is a SQL injection vulnerability in Realm CMS 2.3 and earlier. The flaw occurs in the KeyWordsList function (/_includes/inc_routines.asp) via the kwrd parameter in a kwl action to the default URI, potentially allowing remote attackers to execute arbitrary SQL. Public references conf...

CVE-2008-2680

Multiple cross-site scripting XSS vulnerabilities in db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 CmpctedDB and 2 Boyut parameters...

CVE-2008-2679

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

CVE-2008-2682

CVE-2008-2682 affects Realm CMS 2.3 and earlier (RealmAdmin/login.asp). The vulnerability allows remote attackers to bypass authentication and access admin pages by manipulating cookies (likely cUserRole, cUserName, cUserID). Public references indicate exploitation exists (e.g., exploit-db entry)...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2681

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2680

CVE-2008-2680 concerns multiple XSS vulnerabilities in Realm CMS

CVE-2008-2681

Summary: CVE-2008-2681 affects Realm CMS 2.3 and earlier. The vulnerability allows remote attackers to obtain sensitive information by issuing a direct request to the path _db/compact.asp, which exposes the database path inside an error message. What’s affected: Realm CMS versions up to 2.3 (and ...

CVE-2008-2679: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

CVE-2008-2681: Exposure of Sensitive Information to an Unauthorized Actor

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2680: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 CmpctedDB and 2 Boyut parameters...