Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the printlanguageselectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0876

CVE-2015-0876 affects Saurus CMS Community Edition, specifically the print_language_selectbox function in files like classes/adminpage.inc.php. The vulnerability is cross-site scripting (XSS) that could allow an attacker to inject arbitrary script or HTML into a user’s browser. Impact is browser-...

CVE-2015-0876

Multiple cross-site scripting XSS vulnerabilities in the printlanguageselectbox function in classes/adminpage.inc.php in Saurus CMS Community Edition before 4.7 2015-02-04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#18387086: Saurus CMS Community Edition vulnerable to cross-site scripting

Saurus CMS Community Edition is open source software to manage and build websites. Saurus CMS Community Edition contains multiple cross-site scripting vulnerabilities. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Apply the appropriate update...

CVE-2015-1562

Multiple cross-site scripting XSS vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to admin/usermanagement.php, 2 datasearch parameter to /admin/profiledata.php, or 3 filter parameter to errorlog.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to admin/usermanagement.php, 2 datasearch parameter to /admin/profiledata.php, or 3 filter parameter to errorlog.php...

CVE-2015-1562

Saurus CMS

CVE-2015-1562

Multiple cross-site scripting XSS vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search parameter to admin/usermanagement.php, 2 datasearch parameter to /admin/profiledata.php, or 3 filter parameter to errorlog.php...

Multiple Cross-Site Scripting Vulnerabilities in Saurus CMS

Saurus CMS is a content management system. Saurus CMS suffers from multiple cross-site scripting vulnerabilities due to the program failing to properly process user-supplied input. This allows attackers to exploit this vulnerability to steal cookie-based authentication credentials, execute...

CMS Saurus 4.7 Cross Site Scripting

Advisory: Reflecting XSS vulnerabilities in CMS Saurus v. 4.7 CE Advisory ID: SROEADV-2015-05 Author: Steffen Rösemann Affected Software: CMS Saurus v. 4.7 CE, released: 12.08.2014 Vendor URL: http://www.saurus.info Vendor Status: patched CVE-ID: - ========================== Vulnerability...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

No description provided by source. waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind waraxe Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html...

Saurus CMS Admin Panel - Multiple CSRF Vulnerabilities

No description provided by source. Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

Saurus CMS 4.7.1 - Multiple Vulnerabilities waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web:...

Saurus CMS 4.7.1 Multiple Vulnerabilities

Saurus CMS version 4.7.1 suffers from cross site scripting, remote file inclusion, local file inclusion, information disclosure, remote SQL injection, HTTP response splitting, cross site request forgery, and directory traversal vulnerabilities. Saurus CMS 4.7.1 LFI / RFI / XSS / SQL Injection /...

Saurus CMS 4.7.1 - Multiple Vulnerabilities

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

Saurus CMS 4.7.1 4.7.1 LFI / RFI / XSS / SQL Injection / Traversal / CSRF

waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...

CVE-2010-4943

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

CVE-2010-4943

CVE-2010-4943 affects Saurus CMS 4.7.0 with multiple PHP remote file inclusion vulnerabilities. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the class_path parameter to either file.php or com_del.php. The connected documents corroborate the affected produ...