CVE-2007-4522

CVE-2007-4522 affects Ripe Website Manager

CVE-2007-4523

CVE-2007-4523 affects Ripe Website Manager 0.8.9 and earlier, describing multiple cross-site scripting (XSS) vulnerabilities. autenthenticated remote users can inject arbitrary script/HTML via several parameters across admin pages (e.g., id in pages/delete_page.php, navigation/delete_menu.php/del...

OS2A_1009.txt

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities OS2A ID: OS2A1009 Status: 07/11/2007 Issue Discovered 07/12/2007 Reported to the Vendor 08/22/2007 Public Release Class: SQL Injection and Cross Site Scripting Severity: High Overview: --------- Ripe Website Manager is a...

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities OS2A ID: OS2A1009 Status: 07/11/2007 Issue Discovered 07/12/2007 Reported to the Vendor 08/22/2007 Public Release Class: SQL Injection and Cross Site Scripting Severity: High Overview: --------- Ripe Website Manager is a...

Ripe Website Manager 0.8.x - pagesdelete_page.php?id SQL Injection

Ripe Website Manager 0.8.x - pagesdeletepage.php?id SQL Injection source: https://www.securityfocus.com/bid/25406/info Ripe Website Manager is prone to multiple input-validation vulnerabilities, including HTML- and SQL-injection issues. Exploiting these issues could allow an attacker to steal...

Ripe Website Manager 0.8.x - '/pages/delete_page.php?id' SQL Injection

source: https://www.securityfocus.com/bid/25406/info Ripe Website Manager is prone to multiple input-validation vulnerabilities, including HTML- and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...

Information disclosure

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3525

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3524

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...

CVE-2007-3524

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...

CVE-2007-3525

Ripe Website Manager 0.8.9 and earlier suffers an information disclosure vulnerability where an unauthenticated remote attacker can access includes/phpinfo.php, which calls phpinfo and reveals configuration information. Root cause: direct request to a file that executes phpinfo. Impact: disclosur...

CVE-2007-3525

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3524

CVE-2007-3524 affects Ripe Website Manager ≤ 0.8.9. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the level parameter to either admin/includes/author_panel_header.php or admin/includes/admin_header.php. The issue is ca...

CVE-2007-3524: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to 1 admin/includes/authorpanelheader.php or 2 admin/includes/adminheader.php...

CVE-2007-3525: Undefined Security Weakness

Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Ripe Website Manager (CMS) <= 0.8.9 Remote File Inclusion Vulns

Exploit for unknown platform in category web applications =============================================================== Ripe Website Manager CMS Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/path to...

Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion

Ripe Website Manager CMS 0.8.9 - Remote File Inclusion Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/pat...

Ripe Website Manager (CMS) &lt;= 0.8.9 Remote File Inclusion Vulns

No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: = v0.8.9 Type:: Remote File Include Source:: http://sourceforge.net/project/showfiles.php?groupid=194532 Bug:: - Files:...

Ripe Website Manager (CMS) 0.8.9 - Remote File Inclusion

Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/path to...