runCMS <= 1.3a2 possible remote code execution through the integrated FCKEditor package

--- RunCMS = 1.3a2 remote code execution ------------------------------------ software: site: http://www.runcms.org/public/modules/news/ description: "RUNCMS E-Xoops is a extensible content management system based on the v1 core of Xoops"...

RunCMS < 1.3a3 Arbitrary File Upload

Binary data 3423.prm...

RunCMS Multiple Script bbPath Parameter Remote File Inclusion

The installed version of RunCMS fails to validate user input to the 'bbPath' parameter of two scripts. An unauthenticated attacker may be able to leverage this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts. Note that...

RunCMS 1.2 - 'class.forumposts.php' Remote File Inclusion

?php ---runcms13axpl.php 17.30 09/02/2006 RunCMS = 1.2 arbitrary remote inclusion exploit " = 1.3a shell upload through FCKEditor coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "But when the army is restless and distrustfu...

RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit

Exploit for unknown platform in category web applications ======================================================================= RunCMS = 1.2 class.forumposts.php Arbitrary Remote Inclusion Exploit ======================================================================= ?php ---runcms13axpl.php...

RunCMS &lt;= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit

No description provided by source. ?php ---runcms13axpl.php 17.30 09/02/2006 RunCMS = 1.2 arbitrary remote inclusion exploit " = 1.3a shell upload through FCKEditor coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "But when...

RunCMS <= 1.2 Multiple Vulnerabilities

The version of RunCMS installed on the remote host allows attackers to overwrite arbitrary variables by passing them via a POST method and may also suffer from several SQL injection vulnerabilities resulting in, for example, disclosure of the admin password hash. %NASLMINLEVEL 70300 C Tenable...

CVE-2005-2692

CVE-2005-2692 : Multiple SQL injection vulnerabilities affect RunCMS 1.2 and earlier. Exploitable through parameters in the newbb plus module (addquery, subquery), the forum parameter in newtopic.php, edit.php, or reply.php (newbb plus module), or the msg_id parameter in print.php (messages modul...

CVE-2005-2691

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...

CVE-2005-2691

CVE-2005-2691 stems from RunCMS versions

CVE-2005-2692

Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 addquery and 2 subquery parameters to the newbb plus module, the forum parameter to 3 newtopic.php, 4 edit.php, or 5 reply.php in the newbb plus module, or 6 the msg...

CVE-2005-2691

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...

CVE-2005-2692

Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 addquery and 2 subquery parameters to the newbb plus module, the forum parameter to 3 newtopic.php, 4 edit.php, or 5 reply.php in the newbb plus module, or 6 the msg...

CVE-2005-2692: Undefined Security Weakness

Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 addquery and 2 subquery parameters to the newbb plus module, the forum parameter to 3 newtopic.php, 4 edit.php, or 5 reply.php in the newbb plus module, or 6 the msg...

CVE-2005-2691: Undefined Security Weakness

includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTROVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code...

RunCMS Multiple SQL Injection Vulnerabilities

Binary data 3180.prm...

RunCMS 1.1/1.2 Module Newbb_plus/Messages - SQL Injection

source: https://www.securityfocus.com/bid/14631/info RunCMS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of the...

RunCMS 1.11.2 Module Newbb_plusMessages - SQL Injection

RunCMS 1.11.2 Module NewbbplusMessages - SQL Injection source: https://www.securityfocus.com/bid/14631/info RunCMS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

runcms highlight.php hole

This is a stupid BUG report. They found the bug without checking the script or they know but dont said about it to promote their group. The truth is the script is allow only user that have the right to access the "systems" module to use it, this mean only admin and some moderators/users that have...

CVE-2005-0827

Viewcat.php in 1 RUNCMS 1.1A, 2 Ciamos 0.9.2 RC1, e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops exoops, allow remote attackers to obtain sensitive information via an invalid parameter to the convertorderbytrans function, which reveals the path in a PHP error message...