e-Vision CMS <= 2.02 (SQL/Upload/IG) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== e-Vision CMS = 2.02 SQL/Upload/IG Multiple Remote Vulnerabilities ==================================================================== eVision 2.0 Sql Injection/Remote Fi...

evision-sql.txt

--------------------------------------------------------------------------------------------------------------------------- | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...

Sql injection

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0856

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0856

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0856: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0856

The CVE-2008-0856 entry documents multiple SQL injection vulnerabilities in e-Vision CMS 2.02, where remote attackers can inject arbitrary SQL via the id parameter to iframe.php and print.php. The issue affects the application’s data handling in these two endpoints, enabling potential unauthorize...

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...

phb10-xss.txt

Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...

Directory traversal

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

CVE-2007-3251

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

CVE-2007-3251

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

EUVD-2007-3241

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

CVE-2007-3251

The CVE-2007-3251 entries describe directory traversal vulnerabilities in e-Vision CMS (version 2.02 and earlier). The issues allow remote attackers to (1) include and execute arbitrary local files via a dot-dot in the adminlang cookie to admin/functions.php, and (2) read arbitrary local files vi...

CVE-2007-3251: Undefined Security Weakness

Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...

CVE-2007-3214

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter...

Sql injection

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter...

CVE-2007-3214

The CVE-2007-3214 entry affects e-Vision CMS versions 2.02 and earlier, with the vulnerability in style.php. When magic_quotes_gpc is disabled, the template parameter can be exploited to perform SQL injection, allowing remote attackers to execute arbitrary SQL commands. This is a direct impact on...

CVE-2007-3214

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter...

CVE-2007-3214: Undefined Security Weakness

SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the template parameter...