146 matches found
Social Web CMS 2 - index.php Cross-Site Scripting
Social Web CMS 2 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/38329/info Social Web CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
Social Web CMS XSS / XSRF
Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends: http://server/user/view/addfriend/login/VALIDFRIEND or...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================= Social Web CMS Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friend...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
social Web CMS Beta 2 - Multiple Vulnerabilities
social Web CMS Beta 2 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
social Web CMS Beta 2 - Multiple Vulnerabilities
Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends: http://server/user/view/addfriend/login/VALIDFRIEND or...
Cross site scripting
Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-3120
Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-3120
CVE-2009-3120 is an XSS vulnerability affecting BIGACE Web CMS 2.6, reachable via public/index.php and the id parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with no confidentiality impact, partial integ...
CVE-2009-3120
Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...
A network of popular campus web CMS system vulnerabilities-vulnerability warning-the black bar safety net
Today inadvertently browsing to the home of a high school's website, casually turn to turn. The bottom of the page directly to have“admin”, and click directly into the Background address for http://www.xxxxx.net/xyadmin/login.asp Guess a bit of the database, found at: http://www. xxxxx...
CVE-2009-2379
Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...
Directory traversal
Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...
CVE-2009-2379
CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...
CVE-2009-2379
Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...
BIGACE CMS 2.5 (username) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
User options changer (SQLi) EXPLOIT --Bigace CMS -stable release- 2.5-->
!/usr/bin/perl ----------------------------------------------------------------------------- User options changer SQLi EXPLOIT --Bigace CMS -stable release- 2.5-- ----------------------------------------------------------------------------- CMS INFORMATION: --WEB: http://www.bigace.de/ --DOWNLOAD...
BigACE 2.5 - SQL Injection
BigACE 2.5 - SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
MIM: InfiniX 1.2.003 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== MIM: InfiniX 1.2.003 Multiple SQL Injection Vulnerabilities ===========================================================...
ClanTiger 1.1.1 - Authentication Bypass
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | AUTH BYPASS...