CVE-2005-3729

The CVE-2005-3729 issue affects Idetix Software Systems Revize CMS. It allows remote attackers to disclose sensitive information by directly requesting files in the revize/debug directory (examples: apptables.html and main.html). The underlying cause is unauthorized access to debug-area files, le...

CVE-2005-3729

Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as 1 apptables.html and 2 main.html...

CVE-2005-3727

SQL injection vulnerability in debug/queryresults.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3730

Multiple cross-site scripting XSS vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the 1 resourcetype, 2 objectmap, and 3 redirect parameters, possibly involving setWebSpace.jsp...

CVE-2005-3727: Undefined Security Weakness

SQL injection vulnerability in debug/queryresults.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3728: Undefined Security Weakness

Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information...

CVE-2005-3730: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the 1 resourcetype, 2 objectmap, and 3 redirect parameters, possibly involving setWebSpace.jsp...

CVE-2005-3729: Undefined Security Weakness

Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as 1 apptables.html and 2 main.html...

revizeSQL.txt

Revizer CMS SQL information disclosure and XSS Vendor url:http://www.idetix.com Advisore:http://lostmon.blogspot.com/2005/11/ revizer-cms-sql-information-disclosure.html Vendor notify: exploit available:yes The Revizer Web Content Management System enables non-technical content contributors to...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting use...

Revize CMS - Query_results.jsp SQL Injection

Revize CMS - Queryresults.jsp SQL Injection source: https://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting

Revize CMS HTTPTranslatorServlet - Cross-Site Scripting source: https://www.securityfocus.com/bid/15484/info Revize CMS is prone to a cross-site scripting vulnerabilities. This is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary...

Revize CMS - 'Revize.XML' Information Disclosure

source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability to retrieve sensitive information. Information...

Revize CMS - 'Query_results.jsp' SQL Injection

source: https://www.securityfocus.com/bid/15481/info Revize CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...