Dev_15_sql_xpl.php.txt

---- Dev web management system ConfLoadDBtoPHP; include "admin/config.php"; echo "...

CVE-2005-4555

Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...

CVE-2005-4554

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in an openforum action openforum.php in index.php, 2 cat parameter in getfile.php, and 3 target parameter in downloadnow.php...

CVE-2005-4555

CVE-2005-4555 is a cross-site scripting (XSS) vulnerability affecting DEV web management system versions 1.5 and earlier. The issue resides in add.php where an attacker can inject arbitrary script via four language array parameters: ENTER_ARTICLE_TITLE, SPECIFY_ZONE, ENTER_ARTICLE_HEADER, and ENT...

CVE-2005-4555

Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...

CVE-2005-4554

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in an openforum action openforum.php in index.php, 2 cat parameter in getfile.php, and 3 target parameter in downloadnow.php...

CVE-2005-4554

CVE-2005-4554 describes multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via: (1) the cat parameter in openforum.php (index.php), (2) the cat parameter in getfile.php, and (3) the target parame...

Dev web management system <= 1.5 SQL injection / cross site scripting

---- Dev web management system = 1.5 SQL injection / cross site scripting ----- software: site: http://dev-wms.sourceforge.net/ description: "Dev is powerful and very flexible content management system for web portals.."...

CVE-2005-4555: Undefined Security Weakness

Cross-site scripting XSS vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ENTERARTICLETITLE, 2 SPECIFYZONE, 3 ENTERARTICLEHEADER, and 4 ENTERARTICLEBODY indices in the language array parameter...

CVE-2005-4554: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in an openforum action openforum.php in index.php, 2 cat parameter in getfile.php, and 3 target parameter in downloadnow.php...

Dev Web Management System 1.5 - getfile.php?cat SQL Injection

Dev Web Management System 1.5 - getfile.php?cat SQL Injection source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System...

Dev Web Management System 1.5 - download_now.php?target SQL Injection

Dev Web Management System 1.5 - downloadnow.php?target SQL Injection source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management Syst...

Dev Web Management System 1.5 - 'add.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...

Dev Web Management System 1.5 - 'download_now.php?target' SQL Injection

source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...

Dev Web Management System 1.5 - 'getfile.php?cat' SQL Injection

source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...

Dev Web Management System 1.5 - cat SQL Injection

Dev Web Management System 1.5 - cat SQL Injection this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of omens, and do away with superstitious doubts. Then, until death itself comes, no calamity need be feared...

Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit

No description provided by source. ?php ---Dev15sqlxpl.php 9.54 24/12/2005 Dev =1.5 'cat' SQL injection / admin MD5 password hash disclosure coded by rgod site: http://rgod.altervista.org - this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then g...

Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Dev Web Management System this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of...

Dev Web Management System 1.5 - 'cat' SQL Injection

this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of omens, and do away with superstitious doubts. Then, until death itself comes, no calamity need be feared." errorreporting0; iniset"maxexecutiontime",0;...

Sitekit CMS multiple XSS vuln.

Sitekit CMS multiple XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/sitekit-cms-multiple-xss-vuln.html vednor:http://www.sitekit.net/ affected version:v6.6 and prior Product Description: Sitekit CMS v6.6 enables non-technical business...