IBM Workplace Web Content Management远程跨站脚本漏洞

BUGTRAQ ID: 32408 IBM Workplace Web Content Management是IBM Workplace家族的产品之一，帮助用户在Internet和内网上发布公司内容。 Web Content Management的页面导航组件没有正确地验证通过URL参数所传送的输入便返回给了用户，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 IBM Workplace Web Content Management 60G 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

WebStudio CMS (index.php pageid) Blind SQL Injection Vulnerability

No description provided by source. Application: WebStudio CMS Vendor Name: BDigital Media Ltd Vendors Url: http://www.bdigital.biz Bug Type: WebStudio CMS pageid Blind SQL Injection Vulnerability Exploitation: Remote Severity: Critical Solution Status: Unpatched Introduction: WebStudio CMS is a...

Questcms (XSS/Directory Traversal/SQL) Multiple Remote Vulnerabilities

No description provided by source. -------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact:...

QuestCMS - Cross-Site Scripting / Directory Traversal / SQL Injection

-------------------------------------------------------------------------------- Title : Questcms Multiple Remote Vulnerabilities XSS/Directory Traversal/sql -------------------------------------------------------------------------------- Author: d3b4g contact: bl4ckendatgmaildotcom...

CMME Multiple Information disclosure vulnerabilities

WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...

openEngine <= 2.0 beta4 Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl openEngine = 2.0 beta4 Remote File Inclusion Vulnerability Script: "Open Source Web Content...

openEngine <= 2.0 beta4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== openEngine = 2.0 beta4 Remote File Inclusion Vulnerability =========================================================== :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$,...

openrat-rfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OpenRat ... Greetz: D3m0nDE str0ke and otherz.. dun / 2008...

OpenRat &lt;= 0.8-beta4 (tpl_dir) Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OpenRat = 0.8-beta4 Remote File Inclusion Vulnerability Script: "OpenRat is a free Web...

OpenRat 0.8-beta4 - tpl_dir Remote File Inclusion

OpenRat 0.8-beta4 - tpldir Remote File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OpenRat ... Greetz: D3m0nDE str0ke and otherz.. dun / 2008 milw0rm.com 2008-09-23...

InterTech WCMS - etemplate.php SQL Injection

InterTech WCMS - etemplate.php SQL Injection source: https://www.securityfocus.com/bid/31350/info InterTech Web Content Management System WCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

OpenRat 0.8-beta4 - 'tpl_dir' Remote File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OpenRat ... Greetz: D3m0nDE str0ke and otherz.. dun / 2008 milw0rm.com 2008-09-23...

OpenRat <= 0.8-beta4 (tpl_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== OpenRat ... 0day.today 2018-02-18...

WCMS v.1.0b (news_detail.asp id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ===================================================================...

WCMS 1.0b - Arbitrary Add Admin

WCMS 1.0b - Arbitrary Add Admin !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

wcms-admin.txt

!/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------...

wcms-sql.txt

======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

WCMS v.1.0b Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ================================================= WCMS v.1.0b Arbitrary Add Admin Exploit ================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

WCMS v.1.0b (news_detail.asp id) Remote SQL Injection Vulnerability

No description provided by source. ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

WCMS 1.0b - news_detail.asp SQL Injection

WCMS 1.0b - newsdetail.asp SQL Injection ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, |...