SyndeoCMS <= 2.8.02 Multiple Vulnerabilities

SyndeoCMS is prone to a local file include LFI, a cross-site scripting XSS and an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and...

SyndeoCMS Local File Include, Cross Site Scripting, and HTML Injection Vulnerabilities

SyndeoCMS is prone to a local file-include, a cross-site scripting, and an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Exploiting the local file-include issue allows remote attackers to view or execute local files within the context of the...

Month Of Abysssec Undisclosed Bugs - Syndeo CMS 2.8.02

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | FCKEditor Plain text Editor . . . input type="radio" name="macces...

SyndeoCMS Detection (HTTP)

HTTP based detection of SyndeoCMS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100783";...

syndeocms 2.8.02 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= syndeocms 2.8.02 Multiple Vulnerabilities ========================================= Title : syndeocms 2.8.02 Multiple Vulnerabilities Affected Version : syndeocms FCKEditor Plain text Editor...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (1)

SyndeoCMS 2.8.02 - Multiple Vulnerabilities 1 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | FCKEditor Plain text Editor . . . input type="ra...

XSS vulnerability in SyndeoCMS

Vulnerability ID: HTB22493 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsyndeocms2.html Product: SyndeoCMS Vendor: The SyndeoCMS team http://www.syndeocms.org/ Vulnerable Version: 2.9.0 and Probably Prior Versions Vendor Notification: 12 July 2010 Vulnerability Type: XSS Cross Sit...

XSS vulnerability in SyndeoCMS

Vulnerability ID: HTB22491 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsyndeocms.html Product: SyndeoCMS Vendor: The SyndeoCMS team http://www.syndeocms.org/ Vulnerable Version: 2.9.0 and Probably Prior Versions Vendor Notification: 12 July 2010 Vulnerability Type: Stored XSS Cro...

XSS vulnerability in SyndeoCMS

Vulnerability ID: HTB22492 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsyndeocms1.html Product: SyndeoCMS Vendor: The SyndeoCMS team http://www.syndeocms.org/ Vulnerable Version: 2.9.0 and Probably Prior Versions Vendor Notification: 12 July 2010 Vulnerability Type: Stored XSS...

SyndeoCMS 2.9.0 Cross Site Scripting

===================================================== Vulnerability ID: HTB22491 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsyndeocms.html Product: SyndeoCMS Vendor: The SyndeoCMS team http://www.syndeocms.org/ Vulnerable Version: 2.9.0 and Probably Prior Versions Vendor...

SyndeoCMS 2.9 - Multiple HTML Injection Vulnerabilities

SyndeoCMS 2.9 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/41989/info SyndeoCMS is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...

Cross-site Request Forgery (CSRF) Vulnerabilities in SyndeoCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in SyndeoCMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in SyndeoCMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

CVE-2008-5272

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the template parameter to 1 starnet/editors/fckeditor/studenteditor.php; 2 starnet/modules/snnews/editcontent.php, reached through...

CVE-2008-5271

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the template parameter to 1 starnet/editors/fckeditor/studenteditor.php; 2 starnet/modules/snnews/editcontent.php, reached through...

CVE-2008-5271

CVE-2008-5271 describes a Cross-site scripting (XSS) vulnerability in the SyndeoCMS 2.6.0 package (index.php) where the section parameter can be exploited to inject arbitrary web script/HTML. The cited sources confirm the vulnerability exists in SyndeoCMS 2.6.0 and indicate remote exploitation po...

CVE-2008-5272

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the template parameter to 1 starnet/editors/fckeditor/studenteditor.php; 2 starnet/modules/snnews/editcontent.php, reached through...

CVE-2008-5272

CVE-2008-5272 concerns Fred Stuurman’s SyndeoCMS 2.6.0. It describes multiple directory traversal vulnerabilities exploitable by remote authenticated users to read arbitrary files via a .. path in the template parameter to three endpoints: starnet/editors/fckeditor/studenteditor.php; starnet/modu...

CVE-2008-5272: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the template parameter to 1 starnet/editors/fckeditor/studenteditor.php; 2 starnet/modules/snnews/editcontent.php, reached through...