CommonSense CMS - SQL Injection

Exploit Title: CommonSense CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.sensesites.com/ Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?articleid=SQL Dork : "Powered by CommonSense CMS" Greetz Explore Crew : ArRay yuda N4ck0 K4pt3N...

Article Management System 2.1.2 - Reinstall

Article Management System 2.1.2 - Reinstall ======================================================================================== | Title : ArticleMS Article Management System 2.1.2 Reinstall Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by ArticleMS from...

Article Management System 2.1.2 - Reinstall

======================================================================================== | Title : ArticleMS Article Management System 2.1.2 Reinstall Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by ArticleMS from ArticleTrader | Tested on: windows SP2...

CVE-2010-2136

Directory traversal vulnerability in admin/index.php in Article Friendly, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

Directory traversal

Directory traversal vulnerability in admin/index.php in Article Friendly, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2010-2136

CVE-2010-2136 describes a directory traversal vulnerability in Article Friendly’s admin/index.php. When magic_quotes_gpc is disabled, attackers can read arbitrary files by injecting a ".." in the filename parameter. Affected software is the Article Friendly package; the underlying issue is improp...

CVE-2010-2136

Directory traversal vulnerability in admin/index.php in Article Friendly, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2010-2136: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/index.php in Article Friendly, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2010-2033

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2033

CVE-2010-2033 corresponds to a directory traversal/LFI risk in Joomla! Percha components. The connected template documents detail two affected surfaces: (1) Percha Multicategory Article, component com_perchacategoriestree, version 0.6, where a dot-dot sequence in the index.php controller paramete...

CVE-2010-2033

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2033: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1997

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

CVE-2010-1995

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the 1 title, 2 subTitle, and 3 author parameters in conjunction with a /admin/news/article/add...

CVE-2010-1997

Cross-site scripting XSS vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter...

CVE-2010-1997

The CVE refers to a Cross-site Scripting (XSS) vulnerability in Saurus CMS 4.7.0, specifically in admin/edit.php. The issue is triggered by the HTTP POST parameter pealkiri, allowing remote authenticated users who have "Article list" edit privileges to inject arbitrary web script or HTML that exe...

DB[CMS] - 'article.php' SQL Injection

DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: "Designed and Developed by Debliteck Ltd"...

Joomla! Component Percha Multicategory Article 0.6 - 'Controller' Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla News / Article / Content / Event Cross Site Scripting

x Joomla Component News x Date: 14/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component News x Example: http://www.site.com/index.php?option=comnews=XSS x Demo: http://www.bgci.org/index.php?option=comnews="XSS By Fatal Error x Made in Brazil x Joomla...