EUVD-2007-1232

Malware in sbrugna...

EUVD-2009-1841

Malware in sbrugna...

EUVD-2007-5122

Malware in sbrugna...

EUVD-2010-1371

Malware in sbrugna...

SiTex-Gosuslu Component Arbitrary Query

The vulnerability of the SiTex development platform’s service component is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary requests to the database using a specially created POST request...

PT-2020-3105

Name of the Vulnerable Software and Affected Versions SiTex platform versions affected versions not specified Description The issue is related to insufficient input validation in the SiTex-Госуслуги component of the SiTex platform. This could allow a remote attacker to execute arbitrary database...

SiTex Development Platform XSS

The vulnerability of the SiTex-Service component of the distributed application development platform SiTex is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by manipulating the...

SiTex File Upload

The vulnerability of the file loading mechanism on the server of the distributed application development platform SiTex is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to upload a malicious file to the server remotely...

SiTex Development Platform CSRF

The vulnerability of the SiTex-Service component of the distributed application development platform involves the absence of a CSRF token in web forms. Exploiting this vulnerability allows an attacker to execute cross-site requests on behalf of users, including administrators, through a specially...

SiTex Access Right Disclosure

The vulnerability of the SiTex distributed application development platform is related to insufficient verification of user access rights to data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...

PT-2020-1778

Name of the Vulnerable Software and Affected Versions SiTex affected versions not specified Description The issue is related to insufficient access control checks in the SiTex development platform for distributed applications, allowing a remote attacker to potentially disclose protected...

PT-2020-1978

Name of the Vulnerable Software and Affected Versions SiTex affected versions not specified Description The issue is related to the file upload mechanism on the SiTex platform, which lacks input data sanitization. This could allow a remote attacker to upload malicious files to the server...

PT-2019-4734

Name of the Vulnerable Software and Affected Versions SiTex-Госуслуги affected versions not specified Description The issue is related to the lack of a CSRF token in web forms of the SiTex component. This could allow a remote attacker to perform a cross-site request forgery attack, enabling them ...

PT-2019-4733

Name of the Vulnerable Software and Affected Versions SiTex-Госуслуги affected versions not specified Description The issue is related to the lack of protection for the web page structure in the SiTex component. This could allow a remote attacker to perform cross-site scripting attacks by...

PT-2019-2023

Name of the Vulnerable Software and Affected Versions SiTex-Доступная среда affected versions not specified Description The issue exists due to the lack of measures to neutralize special elements used in SQL queries. This could allow a remote attacker to execute arbitrary database queries using a...

SiteX <= 0.7.4.418 (THEME_FOLDER) Local File Inclusion Vulnerabilities

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

VulnCheck KEV: CVE-2007-5156

Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php."...

CVE-2010-1343

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Sql injection

SQL injection vulnerability in photo.php in SiteX 0.7.4 beta allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

CVE-2010-1343

CVE-2010-1343 concerns a SQL injection in SiteX 0.7.4 beta, affecting the photo.php script via the albumid parameter. The underlying issue is unsanitized input incorporated into a database query, enabling remote attackers to manipulate queries and potentially access sensitive data. Public sources...