Fiomental & Coolsis Backoffice - Multiple Vulnerabilities

No description provided by source...

Capexweb 1.1 SQL Injection

Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

Capexweb 1.1 - SQL Injection

Capexweb 1.1 - SQL Injection Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

Capexweb 1.1 - SQL Injection

Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

cApexWEB ver1.1 SQL Injection

Exploit for php platform in category web applications Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angl...

Fiomental & Coolsis Backoffice Multi Vulnerability

Exploit for php platform in category web applications ================================================== Fiomental & Coolsis Backoffice Multi Vulnerability ================================================== | \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | |...

Fiomental And Coolsis Backoffice SQL Injection / Cross Site Scripting / Shell Upload

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / DEFACEMENT it's for script kiddies... $ Exploit Title : Fiomental &...

Fiomental & Coolsis Backoffice - Multiple Vulnerabilities

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / DEFACEMENT it's for script kiddies... $ Exploit Title : Fiomental &...

WeBProdZ CMS SQL Injection

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / $ Exploit Title : WeBProdZ CMS SQL Injection Vulnerability $ Date :...

WeBProdZ CMS - SQL Injection

| \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| / /||,|||/|| || | | | || | | | | |/' || || | | |/ / | ' \ | /| |\ | | | / | | | | | | | \ |/ /./ / /|,|| || || / / $ Exploit Title : WeBProdZ CMS SQL Injection Vulnerability $ Date :...

WeBProdZ CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== WeBProdZ CMS SQL Injection Vulnerability ======================================== | \ | | | | | |/ / | | | | | // \ \ / / | | | | | | |/ | ' \ | |\ \ /\ V / | | || | || | | | | | | \| /...

CVE-2010-0698

CVE-2010-0698 affects Dynamicsoft WSC CMS 2.2. The vulnerability is an SQL injection in backoffice/login.asp, exploitable by remote attackers via the Password parameter. Impact is partial confidentiality, integrity, and availability. The provided documents do not specify a patch or remediation; n...

WSC CMS (Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================ WSC CMS Bypass SQL Injection Vulnerability ============================================ WSC CMS Bypass SQL Injection Vulnerability Author : Phenom Dork : Realizzato con WSC CMS by Dynamicsoft...

WSC CMS - Authentication Bypass

WSC CMS - Authentication Bypass ------------------------------------------------------ ------------------------------------------------------ | | | | | | | | /| ' \ / \ ' \ / /| ' \ | | | | | | / | | | | | | | | | || || |||| ||//|| || || ------------------------------------------------------...

Comersus BackOffice Lite Administrative Bypass

Comersus ASP shopping cart is a set of ASP scripts creating an online shoppingcart. It works on a database of your own choosing, default is msaccess, and includes online administration tools. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced...

CVE-2005-3397

Cross-site scripting XSS vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersusbackofficesupportError.asp. NOTE: the comersusbackofficemessage.asp/message vector is already covered by CVE-2005-2191 item 2...

CVE-2005-3397

Cross-site scripting XSS vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersusbackofficesupportError.asp. NOTE: the comersusbackofficemessage.asp/message vector is already covered by CVE-2005-2191 item 2...

CVE-2005-3397

CVE-2005-3397 describes a cross-site scripting (XSS) vulnerability in the Comersus BackOffice. The issue is exploitable via the error parameter to the script comersus_backoffice_supportError.asp , allowing remote attackers to inject arbitrary web script or HTML. The description notes that the rel...

Comersus Backoffice 4.x5.06.0 - comersus_Backoffice_supportError.asp?error Cross-Site Scripting

Comersus Backoffice 4.x5.06.0 - comersusBackofficesupportError.asp?error Cross-Site Scripting source: https://www.securityfocus.com/bid/15251/info Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities. The applications are pro...

Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15251/info Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities. The applications are prone to SQL injection attacks, information disclosure and multiple cross-site scripting attacks...