68 matches found
EUVD-2009-1841
Malware in sbrugna...
EUVD-2010-1371
Malware in sbrugna...
EUVD-2007-5122
Malware in sbrugna...
EUVD-2007-1232
Malware in sbrugna...
The vulnerability of the SiTex-Gosuslu development platform’s component, related to insufficient validation of input data, allows for arbitrary queries to be executed against the database.
The vulnerability of the SiTex development platform’s service component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary requests to the database using a specially created POST request...
PT-2020-3105
Name of the Vulnerable Software and Affected Versions SiTex platform versions affected versions not specified Description The issue is related to insufficient input validation in the SiTex-Госуслуги component of the SiTex platform. This could allow a remote attacker to execute arbitrary database...
The vulnerability of the file loading mechanism on the server of the distributed application development platform SiTex allows a perpetrator to upload a malicious file to the server.
The vulnerability of the file loading mechanism on the server of the distributed application development platform SiTex is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to upload a malicious file to the server remotely...
The vulnerability of the SiTex development platform’s SiTex-Gosuslu component, which stems from the absence of a CSRF token in web forms, allows actions to be performed on behalf of users, including administrators.
The vulnerability of the SiTex-Service component of the distributed application development platform involves the absence of a CSRF token in web forms. Exploiting this vulnerability allows an attacker to execute cross-site requests on behalf of users, including administrators, through a specially...
The vulnerability of the SiTex development platform’s SiTex-Gosuslu component, related to insufficient protection of the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the SiTex-Service component of the distributed application development platform SiTex is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by manipulating the...
The vulnerability of the SiTex distributed application development platform, related to insufficient verification of access rights, allows a perpetrator to disclose protected information.
The vulnerability of the SiTex distributed application development platform is related to insufficient verification of user access rights to data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...
PT-2020-1778
Name of the Vulnerable Software and Affected Versions SiTex affected versions not specified Description The issue is related to insufficient access control checks in the SiTex development platform for distributed applications, allowing a remote attacker to potentially disclose protected...
PT-2020-1978
Name of the Vulnerable Software and Affected Versions SiTex affected versions not specified Description The issue is related to the file upload mechanism on the SiTex platform, which lacks input data sanitization. This could allow a remote attacker to upload malicious files to the server...
PT-2019-4734
Name of the Vulnerable Software and Affected Versions SiTex-Госуслуги affected versions not specified Description The issue is related to the lack of a CSRF token in web forms of the SiTex component. This could allow a remote attacker to perform a cross-site request forgery attack, enabling them ...
PT-2019-4733
Name of the Vulnerable Software and Affected Versions SiTex-Госуслуги affected versions not specified Description The issue is related to the lack of protection for the web page structure in the SiTex component. This could allow a remote attacker to perform cross-site scripting attacks by...
PT-2019-2023
Name of the Vulnerable Software and Affected Versions SiTex-Доступная среда affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements used in SQL queries. This could allow a remote attacker to execute arbitrary database queries using a...
SiteX <= 0.7.4.418 (THEME_FOLDER) Local File Inclusion Vulnerabilities
No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...
VulnCheck KEV: CVE-2007-5156
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...
Sql injection
SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...
