Automne CMS 4.4.1 Shell Upload

----------------------------------------------------------------------- Automne CMS fckeditor Arbitrary File Upload Vulnerability ----------------------------------------------------------------------- Author : syst3mf4ult Homepage : http://www.automne-cms.org/ Vendor : http://www.automne-cms.org...

CVE-2011-3708

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

Information disclosure

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

CVE-2011-3708

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

CVE-2011-3708

CVE-2011-3708 affects Automne 4.0.2. A remote attacker can obtain sensitive information via a direct request to a .php file, with the installation path revealed in an error message (shown by admin/page-redirect-info.php). The connected documents confirm the exposure but do not provide exploitatio...

WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload

WS Interactive Automne 4.1 - adminupload-controler.php Arbitrary File Upload source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in...

WS Interactive Automne 4.1 - '/admin/upload-controler.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application...

Automne 4.1.0 Race Condition

// ------------------------------------------------------------------------ // Software................Automne 4.1.0 // Vulnerability...........Race Condition // Threat Level............Very Critical 5/5 // Download................http://en.automne-cms.org/ // Release Date............3/2/2011 //...

WS Interactive Automne 4.0 - '228-recherche.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41686/info Automne is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

WS Interactive Automne 4.0 - 228-recherche.php Cross-Site Scripting

WS Interactive Automne 4.0 - 228-recherche.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41686/info Automne is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...