9 matches found
razorCMS 1.2 Path Traversal Vulnerability
No description provided by source. Exploit Title: razorCMS 1.2 Path Traversal Google Dork: Powered by razorCMS Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: Insert Name...
razorCMS 1.2 path traversal-vulnerability warning-the black bar safety net
Title: razorCMS 1.2 Path Traversal Author: chap0 Download address: http://www.razorcms.co.uk/archive/core/ Affected version: 1.2 Test platform: Ubuntu Patches: Upgrade to latest release 1.2.1 RazorCMS is vulnerable to Path Traversal, when logged in with a least privileged user account the user ca...
razorCMS 1.2 Path Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1...
CVE-2010-5051
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/core/adminfunc.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php...
CVE-2009-4203
Multiple SQL injection vulnerabilities in admin/aclass/adminfunc.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header in a request to the default URI under admin/...
Sql injection
Multiple SQL injection vulnerabilities in admin/aclass/adminfunc.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header in a request to the default URI under admin/...
CVE-2009-4203
Multiple SQL injection vulnerabilities in admin/aclass/adminfunc.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the 1 X-Forwarded-For or 2 Client-IP HTTP header in a request to the default URI under admin/...
CVE-2009-4203
CVE-2009-4203 involves multiple SQL injection vulnerabilities in Arab Portal 2.2, specifically in admin/aclass/admin_func.php. The issue allows remote attackers to inject and execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in requests to the default URI und...