CVE-2012-1248

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain...

Code injection

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain...

CVE-2012-1248

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain...

CVE-2012-1248

The CVE affects baserCMS 1.6.15 and earlier, where the vulnerability resides in app/config/core.php. In shared-hosting environments, installations may not be properly segregated, enabling an attacker with admin access on one domain to hijack sessions on another domain. This is a session managemen...

MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities

Document Title: =============== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=140 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 140...

PT-2012-3165

Name of the Vulnerable Software and Affected Versions baserCMS versions 1.6.15 and earlier Description The issue arises from improper handling of installations in shared-hosting environments, allowing remote attackers to hijack sessions by leveraging administrative access to a different domain...

Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Common Vulnerability Scoring System: ==================================== 8.5 Introduction: ============= Swoopo Gold is a shop content management system coded with PHP,...

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System:...

GetSimple CMS 3.1 Cross Site Scripting

Title: ====== GetSimple CMS v3.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=521 VL-ID: ===== 521 Common Vulnerability Scoring System: ==================================== 5 Introduction: ============= GetSimple ...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Introduction: ============= QuickBlog est un gestionnaire de weblog ecrit en PHP4 compatible PHP5 et MySQL compatible MySQLi multi utilisateur multi langue multi theme Il est tres...

NetBill Billing System v1.2 - Multiple Web Vulnerabilites

Exploit for php platform in category web applications Title: ====== NetBill Billing System v1.2 - Multiple Web Vulnerabilites Introduction: ============= NetBill - Client Control & Billing System - NetBill is an open source web application optimized to fuse customer support, project management,...

SQL Injection and other issues in Micro Technology Services, Inc. Lynx

Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a "Facility wide Duress and Emergency Notification" system...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...

Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities Introduction: ============= Viscacha is a free bulletin board system with an integrated CMS. The intention of the software engineers is to combine the current standards...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 512...

Lynx Message Server Multiple Vulnerabilities

Exploit for cgi platform in category web applications 1. Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a...

Free Reality v3.1-0.6 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Introduction: ============= Free Realty is primarily designed for real estate agents and offices to list properties on the internet. With Free Realty the end user does not need...

Genium CMS 2012Q2 - Multiple Vulnerabilities

Genium CMS 2012Q2 - Multiple Vulnerabilities Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können S...

Lynx Message Server - Multiple Vulnerabilities

Lynx Message Server - Multiple Vulnerabilities 1. Summary The Micro Technology Services Inc. "Lynx Message Server 7.11.10.2" and/or "LynxTCPService version 1.1.62" web interface is vulnerable to SQL Injection, Cross-Site Scripting, and other security problems. 2. Description Lynx is a "Facility...

myCare2x CMS - Multiple Vulnerabilities

Title: ====== myCare2x CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=524 VL-ID: ===== 524 Introduction: ============= myCare2x is an web application. All program modules and data accesses are processed in the...