EUVD-2012-2885

Malware in sbrugna...

Artiphp CMS 5.5.0 Database Backup Disclosure Exploit

No description provided by source. ?php / Artiphp CMS 5.5.0 Database Backup Disclosure Exploit Vendor: Artiphp Product web page: http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Desc: Artip...

CVE-2012-2905

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2012-2906

Multiple cross-site scripting XSS vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo r422 allow remote attackers to inject arbitrary web script or HTML via the 1 addimgnamepost, 2 asciiartpost, 3 expediteur, 4 titresav, or 5 z39d27af885b32758ac0e7d4014a61561 parameter...

Improper access control

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo r422 allow remote attackers to inject arbitrary web script or HTML via the 1 addimgnamepost, 2 asciiartpost, 3 expediteur, 4 titresav, or 5 z39d27af885b32758ac0e7d4014a61561 parameter...

CVE-2012-2905

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2012-2906

Multiple cross-site scripting XSS vulnerabilities in artpublic/recommandation/index.php in Artiphp CMS 5.5.0 Neo r422 allow remote attackers to inject arbitrary web script or HTML via the 1 addimgnamepost, 2 asciiartpost, 3 expediteur, 4 titresav, or 5 z39d27af885b32758ac0e7d4014a61561 parameter...

CVE-2012-2905

CVE-2012-2905 affects Artiphp CMS 5.5.0 Neo (r422), where database backups are stored with predictable names under the web root due to insufficient access control. This information exposure enables remote attackers to obtain sensitive data via direct requests. The primary impact is confidential d...

CVE-2012-2906

Artiphp CMS 5.5.0 Neo (r422) is affected by multiple cross-site scripting (XSS) flaws in artpublic/recommandation/index.php. The vulnerability allows remote attackers to inject arbitrary web script orHTML via five parameters: add_img_name_post, asciiart_post, expediteur, titre_sav, and z39d27af88...

Artiphp CMS 5.5.0 Database Backup Disclosure

\n\n\n"; die; $godinaarray = array'2012','2011','2010'; $mesecarray = array'12','11','10','09', '08','07','06','05', '04','...

Artiphp CMS 5.5.0 Cross Site Scripting

Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities Vendor: Artiphp Product web page: http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage your website. Desc: Artiphp CMS suffers from multiple...

Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities

Summary Artiphp is a content management system CMS open and free to create and manage your website. Description Artiphp CMS suffers from multiple cross-site scripting vulnerabilities via several parameters thru POST method. Attackers can exploit these weaknesses to execute arbitrary HTML and scri...

Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities

Exploit for php platform in category web applications Artiphp CMS v5.5.0 Multiple XSS POST Injection Vulnerabilities Vendor: Artiphp Product web page: http://www.artiphp.com Affected version: 5.5.0 Neo r422 Summary: Artiphp is a content management system CMS open and free to create and manage you...