CVE-2005-2489: Undefined Security Weakness

Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php...

CVE-2005-2488: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via 1 the strRootpath parameter to validsession.php or 2 the strTable parameter to Admin/News/List.php...

[SA16317] web content management Cross-Site Scripting and Authentication Bypass

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Web Content Management - validsession.php?strRootpath Cross-Site Scripting

Web Content Management - validsession.php?strRootpath Cross-Site Scripting source: https://www.securityfocus.com/bid/14464/info Web content management is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Web Content Management - list.php?strTable Cross-Site Scripting

Web Content Management - list.php?strTable Cross-Site Scripting source: https://www.securityfocus.com/bid/14464/info Web content management is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

Web Content Management - 'validsession.php?strRootpath' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14464/info Web content management is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary scri...

Web Content Management - 'list.php?strTable' Cross-Site Scripting

source: https://www.securityfocus.com/bid/14464/info Web content management is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary scri...

CVE-2004-2210: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...

XOOPS 2.0.11 && Earlier Multiple Vulnerabilities

GulfTech Security Research June 28th, 2005 Vendor : XOOPS URL : http://www.xoops.org/ Version : XOOPS 2.0.11 And Earlier Risk : Multiple Vulnerabilities Description: XOOPS is a very popular dynamic web content management system written in Object Oriented PHP. One of the features of XOOPS is it's...

postnukeInclusion.txt

Product : Postnuke 0.750 http://www.postnuke.com Description: Postnuke 0.750 - 0.760rc4 local file inclusion Severity: High Description =========== Postnuke is Web Content Management System written in PHP and using mysql as database backend. Detail ====== Directory traversal in function pnModFunc...

panews.txt

===================================================== paNews 2.0b4: SQL Injection and remote code execution ===================================================== FraMe - frame at kernelpanik.org http://www.kernelpanik.org ===================================================== paNews es un script...

[Full-Disclosure] [SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection

Products: Postnuke v 0.726 http://www.postnuke.com Date: 15 April 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors:skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.726 and below SQL injection...

Mambo Open Source Multiple Vulnerabilities

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

mambo45.txt

Vendor : Mambo Open Source URL : http://www.mamboserver.com Version : Mambo Open Source 4.5 Stable 1.0.3 && Earlier Risk : Multiple Vulnerabilities Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the...

Mambo 4.5 - Multiple Vulnerabilities

Mambo 4.5 - Multiple Vulnerabilities Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source...

Mambo < 4.5 - Multiple Vulnerabilities

Mambo Multiple Vulnerabilities Vendor: Mambo Open Source Product: Mambo Version: = 4.5 Website: http://www.mamboserver.com/ BID: 9890 9891 Description: Mambo Open Source is the finest open source Web Content Management System available today. Mambo Open Source makes communicating via the Web easy...

Mambo OS v4.5/v4.6: remote command execution

Product: Mambo Open Source v4.5 Mambo Open Source v4.6 CVS Vendor: Miro International Pty Ltd. Author: FraMe frame at kernelpanik.org URL: http://www.kernelpanik.org CONTENTS 1. Overview 2. Description. 3. Details 4. Patches. 1. Overview. Mambo Open Source is an, open source, modular, web content...

Divine OpenMarket Content Server XSS

Content Server is a web content management from Divine www.divine.com A Cross Site Scripting in this product allows injection of hostile HTML/script into the error page. Example : http://www.mouffleton.com/servlet/ContentServer?pagename=body20onload=alertdocument.cookie; Workaround : Catch error...

N/X Web Content Management Multiple Script Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using N/X Web content management system. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network...

NX Web Content Management System 2002 Prerelease 1 - datasets.php?c_path Local File Inclusion

NX Web Content Management System 2002 Prerelease 1 - datasets.php?cpath Local File Inclusion source: https://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacke...