4582 matches found
The reality of System Management Mode attacks
Another day arrives and, with it, another way to run code. This time, it’s executing arbitrary code in System Management Mode SMM memory. That sounds kind of exciting, right? A SMM rootkit? Does that mean that we need an anti-malware scanner for SMM memory now? Or will it just fade away? All this...
CVE-2009-0883
SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...
Sql injection
SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...
CVE-2009-0883
CVE-2009-0883 involves a SQL injection in Blue Eye CMS 1.0.0 and earlier when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the BlueEyeCMS_login cookie parameter. Affected software is Blue Eye CMS (version 1.0.0 and earlier); root cause is uns...
CVE-2009-0883
SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMSlogin cookie parameter...
Sql injection
SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
CVE-2008-6434
SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter...
CVE-2008-6433
Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
CVE-2008-6434
SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrary SQL commands via the LinkServID parameter...
CVE-2008-6433
Cross-site scripting XSS vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action...
CVE-2008-6434
The CVE-2008-6434 issue affects Blue River Interactive Group Sava CMS prior to version 5.0.122. The vulnerability is an SQL injection in index.cfm via the LinkServID parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base severity of HIGH (CVSS v2: AV:N/...
CVE-2008-6433
The CVE-2008-6433 issue affects Blue River Interactive Group Sava CMS prior to version 5.0.122. A cross-site scripting (XSS) vulnerability exists in index.cfm where the keywords parameter in a search action can be exploited to inject arbitrary web script or HTML. This is a remote impact vulnerabi...
Blue Eye CMS <= 1.0.0 Remote Cookie SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== Blue Eye CMS Only?? 11: $clogin = $COOKIE"BlueEyeCMSlogin"; // -- Not clean?? 12: $cpass = $COOKIE"BlueEyeCMSpass"; 13: $ckey = $COOKIE"BlueEyeCMSkey"; .... 16: $table =...
Blue Eye CMS 1.0.0 Cookie SQL Injection
BlueEye CMS Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIE"BlueEyeCMSlogin" // -- Only?? 11: $clogin = $COOKIE"BlueEyeCMSlogin"; // -- Not clean?? 12: $cpass = $COOKIE"BlueEyeCMSpass"; 13: $ckey =...
Blue Eye CMS 1.0.0 - Remote Cookie SQL Injection
BlueEye CMS Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIE"BlueEyeCMSlogin" // -- Only?? 11: $clogin = $COOKIE"BlueEyeCMSlogin"; // -- Not clean?? 12: $cpass = $COOKIE"BlueEyeCMSpass"; 13: $ckey =...
Blue Eye CMS <= 1.0.0 Remote Cookie SQL Injection Vulnerability
No description provided by source. BlueEye CMS = 1.0.0 Remote Cookie SQL Injection Vulnerability found by ka0x ka0x01alt+64gmail.com Download: http://kent.dl.sourceforge.net/sourceforge/blueeyecms/blueeyecms-100preRC.rar need magicquotesgpc = Off - Vuln code: 10: if !empty$COOKIE"BlueEyeCMSlogin"...
[BMSA-2009-03] Multiple vulnerabilities in OpenSite v2.1
BLUE MOON SECURITY ADVISORY 2009-03 =================================== :Title: Multiple vulnerabilities in OpenSite v2.1 :Severity: Critical :Reporter: Blue Moon Consulting :Products: OpenSite v2.1 :Fixed in: to be fixed in 3.0 Description ----------- OpenSite is an Open Source Content Managemen...
Blue Utopia - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/33851/info Blue Utopia is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process...
Blue Utopia - index.php Local File Inclusion
Blue Utopia - index.php Local File Inclusion source: https://www.securityfocus.com/bid/33851/info Blue Utopia is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local...