tgs CMS 0.x - Cross-Site Scripting SQL Injection File Disclosure

tgs CMS 0.x - Cross-Site Scripting SQL Injection File Disclosure | | | / | | / | | | \ / | | | / / | |/ \ / / |/ | |/| | | ' \ / | / / | | | | | | | | | | | | | |/ / ||//\||| |||| ||,/| +-+-+-+-+ |C|r|e|w| +-+-+-+-+ TGS CMS Cross Site Scripting,SQL injection,Blind SQL/XPath injection,Source...

TGS CMS 0.x (XSS/SQL/FD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== TGS CMS 0.x XSS/SQL/FD Multiple Remote Vulnerabilities ======================================================== TGS CMS Cross Site Scripting,SQL injection,Blind SQL/XPath...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2008-6839

Multiple cross-site scripting XSS vulnerabilities in TGS Content Management 0.3.2r2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg and 2 goodmsg parameters to a login.php and b index.php, and the 3 dir and 4 id parameters to index.php. NOTE: the provenance of this...

CVE-2008-6839

CVE-2008-6839 affects TGS Content Management 0.3.2r2. It has multiple XSS vulnerabilities in login.php and index.php triggered by the parameters (1) msg, (2) goodmsg and (3) dir, (4) id. The root cause is lack of proper input sanitization, allowing remote attackers to inject arbitrary scripts via...

tgscms-exec.txt

TGS CMS Remote Code Execution Exploit by 0in from Dark-Coders Group! www.dark-coders.pl Contact: 0indotemailatgmaildotcom Greetings to:dieangel,suN8Hclf,m4r1usz,cOndemned,str0ke Dork:NULL - because "You cannot kill what you did not create" templatedir = "'.$POST'templatedir'.'";...

TGS CMS Remote Code Execution Exploit

TGS CMS Remote Code Execution Exploit by 0in from Dark-Coders Group! www.dark-coders.pl Contact: 0indotemailatgmaildotcom Greetings to:dieangel,suN8Hclf,m4r1usz,cOndemned,str0ke Dork:NULL - because "You cannot kill what you did not create" - Duality by Slipknot Let's analyze the vuln: We've got...

TGS CMS 0.3.2r2 Remote Code Execution Exploit

No description provided by source. TGS CMS Remote Code Execution Exploit by 0in from Dark-Coders Group! www.dark-coders.pl Contact: 0indotemailatgmaildotcom Greetings to:dieangel,suN8Hclf,m4r1usz,cOndemned,str0ke Dork:NULL - because "You cannot kill what you did not create" - Duality by Slipknot...

TGS Content Management 0.3.2r2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30157/info TGS Content Management is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...

TGS Content Management 0.3.2r2 - login.php Multiple Cross-Site Scripting Vulnerabilities

TGS Content Management 0.3.2r2 - login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30157/info TGS Content Management is prone to an HTML-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize...