Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change...

Saurus CMS Admin Panel - Multiple Cross-Site Request Forgery Vulnerabilities

Author: Fady Mohammed Osman cute hacker Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz Version: 4.7.0 Tested on: Ubuntu 10.04 CVE : Not available This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC ...

Saurus CMS Admin Panel Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ==================================================== Saurus CMS Admin Panel Multiple CSRF Vulnerabilities ==================================================== Author: Fady Mohammed Osman cute hacker Software Link:...

Saurus CMS 4.7.0 - Remote File Inclusion

Saurus CMS 4.7.0 - Remote File Inclusion Exploit Title: SaurusCMSupdate4.7.0 Remote File Include Date: 11-8-2010 Author: LoSt.HaCkEr Software Link: http://www.brothersoft.com/saurus-cms-download-17626.html Version: v 4.7.0 Tested on: Windows XP CVE : هكر المسيب ContactLoSt.HaCkEratyahoodotcom...

Saurus CMS 4.7.0 - Remote File Inclusion

Exploit Title: SaurusCMSupdate4.7.0 Remote File Include Date: 11-8-2010 Author: LoSt.HaCkEr Software Link: http://www.brothersoft.com/saurus-cms-download-17626.html Version: v 4.7.0 Tested on: Windows XP CVE : هكر المسيب ContactLoSt.HaCkEratyahoodotcom Exploit:...

CVE-2010-1997

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

CVE-2010-1997

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

CVE-2010-1997

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

CVE-2010-1997

The CVE refers to a Cross-site Scripting (XSS) vulnerability in Saurus CMS 4.7.0, specifically in admin/edit.php. The issue is triggered by the HTTP POST parameter pealkiri, allowing remote authenticated users who have "Article list" edit privileges to inject arbitrary web script or HTML that exe...

Saurus CMS 4.7.0 Cross Site Scripting

Vulnerability ID: HTB22361 Reference: http://www.htbridge.ch/advisory/xssinsauruscms.html Product: Saurus CMS Community Editon Vendor: Saurused Ltd Vulnerable Version: 4.7.0 Vendor Notification: 27 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting...

Saurus CMS 4.7 - edit.php Cross-Site Scripting

Saurus CMS 4.7 - edit.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40059/info Saurus CMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scri...

Saurus CMS 4.7 - 'edit.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40059/info Saurus CMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user ...

XSS in Saurus CMS

Vulnerability ID: HTB22361 Reference: http://www.htbridge.ch/advisory/xssinsauruscms.html Product: Saurus CMS Community Editon Vendor: Saurused Ltd Vulnerable Version: 4.7.0 Vendor Notification: 27 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted, Awaiting...

Cross-site Scripting (XSS) in Saurus CMS

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Saurus CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Saurus CMS: CVE-2010-1997 The vulnerability exists due to insufficient input sanitation in the HTTP...

Saurus CMS 4.6.4 - Multiple Remote File Inclusions

Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce $classpath."excel/class.writeexcelbiffwriter.inc.php"; requireonce...

Saurus CMS 4.6.4 - Multiple Remote File Inclusions

Saurus CMS 4.6.4 - Multiple Remote File Inclusions Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce...