ZeroCMS 1.0 - Persistent Cross-Site Scripting

ZeroCMS 1.0 - Persistent Cross-Site Scripting Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested o...

ZeroCMS 1.0 - Persistent Cross-Site Scripting

Exploit Title: Persistent ZeroCMS Cross-Site Scripting Vulnerability Discovered by: Mayuresh Dani Vendor Homepage: http://www.aas9.in/zerocms/ Software Link: https://github.com/pcx1256/zerocms/archive/master.zip Version: 1.0? Date: 2014-07-25 Tested on: Windows 7 / Mozilla Firefox Ubuntu 14.04 /...

CVE-2014-4194

SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...

Sql injection

SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...

CVE-2014-4194

ZeroCMS 1.0 is affected by an SQL injection in zero_transact_article.php via the article_id POST parameter in the Submit Comment action. The vulnerability arises from unsanitized input, enabling remote attackers to execute arbitrary SQL commands and potentially access or manipulate the database. ...

CVE-2014-4194

SQL injection vulnerability in zerotransactarticle.php in ZeroCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a Submit Comment action...

CVE-2014-4195

Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...

CVE-2014-4195

Cross-site scripting XSS vulnerability in zeroviewarticle.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the articleid parameter...

CVE-2014-4195

CVE-2014-4195 describes an XSS vulnerability in ZeroCMS 1.0, where the parameter article_id in zero_view_article.php can be exploited to inject arbitrary web script or HTML. The entry (NVD, CVSS v2 base score 4.3, Medium) indicates the issue is exploitable via network with no authentication, with...

ZeroCms 1.0 /zero_view_article.php SQL注入漏洞

No description provided by source...

ZeroCms 1.0 /zero_transact_article.php SQL注入漏洞

No description provided by source...

ZeroCMS 1.0 - (zero_view_article.php, article_id param) SQL Injection Vulnerability

No description provided by source. ? ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc: Input passed via th...

ZeroCMS 1.0 - zero_transact_user.php, Handling Privilege Escalation

No description provided by source. import sys,getopt,cookielib,urllib2,urllib ZeroCMS 1.0 zerotransactuser.php Impropper Form post hanling, parameter polution Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ author: [email protected] Tested on: php 5.4.27 OSVDB ID...

ZeroCMS 1.0 - (zero_transact_article.php article_id POST parameter) SQL Injection Vulnerability

No description provided by source. ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE:...

ZeroCMS 1.0 Cross Site Scripting

ZeroCMS v1.0 Cross-Site Scripting Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: Medium CVE: CVE-2014-4195 Date: 20/06/2014 Discovered by: Filippos Mastrogiannis @filipposmastro ZeroCMS is a very simple Content Management...

ZeroCMS 1.0 - zero_transact_article.php SQL Injection

ZeroCMS 1.0 - zerotransactarticle.php SQL Injection ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 -...

ZeroCMS 1.0 - 'zero_transact_article.php' SQL Injection

ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE: CVE-2014-4194 Date: 20/06/2014...

ZeroCMS 1.0 SQL Injection Vulnerability

ZeroCMS version 1.0 suffers from a remote SQL injection vulnerability. ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 -...

ZeroCMS 1.0 SQL Injection

ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE: CVE-2014-4194 Date: 20/06/2014...