CVE-2006-4026

This CVE affects SAPID CMS 123 rc3 with a PHP remote file inclusion vulnerability. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php or the (2) GLOBALS["root_path"] parameter in usr/extensions/get_tree.in...

CVE-2006-4026

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...

CVE-2006-4026: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...

SAPID CMS remote File Inclusion vulnerabilities

Title: SAPID CMS remote File Inclusion Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website : http://sapid.sourceforge.net Severity: Critical Details: + Remote File Inclusion 1 vulnerab...

SAPID CMS <= 1.2.3.05 (root_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== SAPID CMS = 1.2.3.05 rootpath Remote File Include Vulnerabilities ===================================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BE...

SAPID 1.2.3.05 - ROOT_PATH Remote File Inclusion

SAPID 1.2.3.05 - ROOTPATH Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID CMS = v. 1.2.3.05 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

SAPID 1.2.3.05 - 'ROOT_PATH' Remote File Inclusion

$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID CMS = v. 1.2.3.05 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahim $$ $$ Contact...

CVE-2005-4006

SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files 1 insertfile.php, 2 insertimage.php, 3 insertlink.php, 4 insertqcfile.php, and 5 edit.php...

CVE-2005-4007

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2005-4007

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2005-4007

SAPID CMS prior to 1.2.3.03 contains multiple unspecified vulnerabilities related to newly registered users and possible authorization checks, affecting the files mvc/controller/user_request_analysis.inc.php and usr/xml/ddc/authorization.xml. The exact impact and exploit paths are not detailed in...

CVE-2005-4006

SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files 1 insertfile.php, 2 insertimage.php, 3 insertlink.php, 4 insertqcfile.php, and 5 edit.php...

CVE-2005-4006

SAPID CMS versions before 1.2.3.03 are vulnerable to an authentication bypass via direct requests to usr/system files (insert_file.php, insert_image.php, insert_link.php, insert_qcfile.php, edit.php). The issue enables remote attackers to bypass authentication and potentially obtain unauthorized ...

PT-2005-4743 · Sapid · Sapid Cms

Name of the Vulnerable Software and Affected Versions: SAPID CMS versions prior to 1.2.3.03 Description: The issue involves multiple unspecified vulnerabilities related to newly registered users and possibly authorization checks. These vulnerabilities have unknown impact and attack vectors,...

CVE-2005-4007: Undefined Security Weakness

Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving 1 mvc/controller/userrequestanalysis.inc.php and 2 usr/xml/ddc/authorization.xml...

CVE-2005-4006: Improper Authentication

SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files 1 insertfile.php, 2 insertimage.php, 3 insertlink.php, 4 insertqcfile.php, and 5 edit.php...

PT-2005-4742 · Sapid · Sapid Cms

Name of the Vulnerable Software and Affected Versions: SAPID CMS versions prior to 1.2.3.03 Description: The issue allows remote attackers to bypass authentication by making direct requests to certain files, including insert file.php, insert image.php, insert link.php, insert qcfile.php, and...

[SA17859] SAPID CMS Security Bypass Vulnerability

TITLE: SAPID CMS Security Bypass Vulnerability SECUNIA ADVISORY ID: SA17859 VERIFY ADVISORY: http://secunia.com/advisories/17859/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SAPID CMS 1.x http://secunia.com/product/6323/ DESCRIPTION: A vulnerability has been...