CVE-2006-4016

The CVE-2006-4016 entry concerns a Cross-site Scripting (XSS) flaw in toendaCMS. Affected software: toendaCMS stable versions 1.0.3 and earlier, and unstable 1.1 and earlier. The vulnerability occurs in the s parameter of the /toendaCMS endpoint, allowing remote attackers to inject arbitrary web ...

CVE-2006-4016

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2006-4016: Undefined Security Weakness

Cross-site scripting XSS vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter...

ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload

ToendaCMS 1.0.0 - FCKeditor Arbitrary File Upload !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; retur...

toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "ToendaCMS = 1.0.0 Shizouka stable 'FuCKeditor' remote commands execution\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "toendaCMS is Free Software released under th...

toendaCMS <= 1.0.0 (FCKeditor) Remote File Upload Exploit

Exploit for unknown platform in category web applications ========================================================= toendaCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...

ToendaCMS 1.0.0 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

Cross site scripting

Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...

CVE-2006-2799

Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...

CVE-2006-2799

Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...

CVE-2006-2799

CVE-2006-2799 describes a Cross-Site Scripting (XSS) vulnerability in toendaCMS 0.7.0, specifically in content_footer.php where the print_url parameter can be exploited to inject arbitrary web scripts or HTML. The vulnerability is exploitable remotely and is categorized with a CVSS v2 base score ...

CVE-2006-2799: Undefined Security Weakness

Cross-site scripting XSS vulnerability in contentfooter.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the printurl variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...

toendaCMS 0.7.0 Cross Site Scripting

Discovery By: Jokubas.S =================================== Example: http://target/?id=XSS =================================== irc.data.lt offence ===================================...

ToendaCMS 0.7 - index.php Cross-Site Scripting

ToendaCMS 0.7 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

ToendaCMS 0.7 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18178/info ToendaCMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of ...

CVE-2005-4422

Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...

CVE-2005-4422

CVE-2005-4422 affects toendaCMS prior to 0.6.2 Stable. The vulnerability is an unrestricted file upload that lets remote authenticated administrators execute arbitrary code by uploading a file with an executable extension and then accessing it via a direct request to data/images/albums. The issue...

CVE-2005-4422

Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...

CVE-2005-4353

SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4353

The CVE-2005-4353 entry describes an SQL injection in toendaCMS 0.6.2.1 when configured to use a SQL database. The vulnerability occurs in index.php and allows remote attackers to alter or extract data by injecting arbitrary SQL through the id parameter. Affected product: toendaCMS 0.6.2.1 (SQL-e...