EUVD-2009-3163

Malware in sbrugna...

EUVD-2009-3154

Malware in sbrugna...

EUVD-2009-3165

Malware in sbrugna...

EUVD-2009-3150

Malware in sbrugna...

EUVD-2009-3164

Malware in sbrugna...

Anantasoft Gazelle CMS CSRF Vulnerability

No description provided by source. ======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email...

Gazelle CMS 1.0 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/47157/info Anantasoft Gazelle CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or...

Gazelle CMS 1.0 - Cross-Site Scripting SQL Injection

Gazelle CMS 1.0 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/47157/info Anantasoft Gazelle CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authenticatio...

[MajorSecurity SA-068]Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery

MajorSecurity SA-068Anantasoft Gazelle CMS - change admin password via Cross-site Request Forgery Details ======= Product: Anantasoft Gazelle CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.anantasoft.com Vendor-Status: informed Advisory-Status: published Credits ============...

Anantasoft Gazelle CMS Cross Site Request Forgery

======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by...

Anantasoft Gazelle CMS CSRF Vulnerability

Exploit for unknown platform in category web applications ========================================= Anantasoft Gazelle CMS CSRF Vulnerability ========================================= Software AnantasoftGazelleCMS Category CMS / Portals Plateform php Proof of concept Targeted URL:...

Gazelle CMS - Cross-Site Request Forgery

======================================================================= Anantasoft Gazelle CMS CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by...

CVE-2009-3181

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. dot dot in the customizetemplate parameter in a direct request to admin/settemplate.php...

CVE-2009-3182

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/...

CVE-2009-3180

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php...

Directory traversal

Directory traversal vulnerability in Anantasoft Gazelle CMS 1.0 allows remote attackers to overwrite arbitrary files via a .. dot dot in the customizetemplate parameter in a direct request to admin/settemplate.php...

Design/Logic Flaw

Anantasoft Gazelle CMS 1.0 allows remote attackers to conduct a password reset for other users via a modified user parameter to renew.php...

CVE-2009-3171

Multiple cross-site scripting XSS vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter to user.php or 2 lookup parameter to search.php...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/editor/filemanager/browser.html in Anantasoft Gazelle CMS 1.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in user/File/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Anantasoft Gazelle CMS 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter to user.php or 2 lookup parameter to search.php...