BigAce 2.7.5 File Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Bigace 2.7.5 Remote File Upload Vulnerability

Exploit for php platform in category web applications InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link : http://www.bigace.de/bigace-2.7.5.html Email : email protected Data : 2011-03-29 Google dork: "Powered by Bigace 2.7.5" Category:...

BigACE 2.7.5 - Arbitrary File Upload

BigACE 2.7.5 - Arbitrary File Upload ========================================== Bigace 2.7.5 Remote Upload file Vulnerability ========================================== InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link :...

BigACE 2.7.5 - Arbitrary File Upload

========================================== Bigace 2.7.5 Remote Upload file Vulnerability ========================================== InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link : http://www.bigace.de/bigace-2.7.5.html Email :...

Bigace 2.7.5 Arbitrary File Upload

========================================== Bigace 2.7.5 Remote Upload file Vulnerability ========================================== InformatioN Title : Bigace 2.7.5 Remote Upload file Vulnerability Author : Net.Edit0r Vendor or Software Link : http://www.bigace.de/bigace-2.7.5.html Email :...

Path disclosure in BIGACE Web CMS

Vulnerability ID: HTB22690 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbigacewebcms.html Product: BIGACE Web CMS Vendor: Kevin Papst http://www.bigace.de/ Vulnerable Version: 2.7.3 Vendor Notification: 02 November 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor...

Bigace_2.7.3 CSRF Change Admin Password POC

Exploit for php platform in category web applications =========================================== Bigace2.7.3 CSRF Change Admin Password POC =========================================== !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software lin...

Bigace 2.7.3 Cross Site Request Forgery

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

BigACE 2.7.3 - Cross-Site Request Forgery Change Admin Password !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7...

BigACE 2.7.3 - Cross-Site Request Forgery (Change Admin Password)

!/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software link : http://www.bigace.de/download.html Autor : Sweet Email : [email protected] Date : 26/10/2010 Software version : 2.7.3 Software detail: BIGACE - Dynamic Web CMS - is a free,...

BigAce 2.7.2 Cross Site Scripting

Exploit Title: Multiple XSS non/persistant in BigAce 2.7.2 Date: 18.06.2010 Author: lem Software Link: http://www.bigace.de Version: 2.7.2 Tested on: Ubuntu 10 LTS CVE : nope Code : There is a XSS vulnerability in login page...

[Bkis-01-2010] Multiple Vulnerabilities in BigAce - Bkis

Multiple Vulnerabilities in BigAce 1. General Information BigAce is a free content management software CMS written in PHP, and is available at http://www.bigace.de. In April 2010, Bkis Security discovered an XSS and CSRF vulnerability in BigAce 2.7.1. Taking advantage of this vulnerability, hacke...

Cross site scripting

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3120

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3120

CVE-2009-3120 is an XSS vulnerability affecting BIGACE Web CMS 2.6, reachable via public/index.php and the id parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with no confidentiality impact, partial integ...

CVE-2009-3120

Cross-site scripting XSS vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2379

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

Directory traversal

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...

CVE-2009-2379

CVE-2009-2379 affects BIGACE Web CMS 2.6: a directory traversal in public/index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the cmd parameter. This results in local file inclusion and potential code execution within the affected CMS. No exploitati...

CVE-2009-2379

Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cmd parameter...