EUVD-2008-5751

Malware in sbrugna...

CFAGCMS 1 - (right.php title) SQL Injection Vulnerability

No description provided by source. cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

CFAGCMS 1- Remote File Inclusion Vulnerabilities

No description provided by source. Author : BeyazKurt - [email protected] Script : CFAGCMS Download : http://sourceforge.net/project/showfiles.php?groupid=197936 Vuln : Page themes/default/index.php, Line 15-16 : ?php include$main;? ?php include$right;?...

CFAGCMS SQL Injection Exploit

No description provided by source. Exploit Title: CFAGCMS SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/project/showfiles.php?groupid=197936 Version: N/A Tested on: GNU/LINUX Code right.php $title = $GET'title'; $query = "SELECT FROM pages WHERE titl...

CFAGCMS - SQL Injection

CFAGCMS - SQL Injection Exploit Title: CFAGCMS SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/project/showfiles.php?groupid=197936 Version: N/A Tested on: GNU/LINUX Code right.php $title = $GET'title'; $query = "SELECT FROM pages WHERE title =...

CFAGCMS - SQL Injection

Exploit Title: CFAGCMS SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/project/showfiles.php?groupid=197936 Version: N/A Tested on: GNU/LINUX Code right.php $title = $GET'title'; $query = "SELECT FROM pages WHERE title = '".$title."'"; $result =...

CFAGCMS SQL Injection Exploit

Exploit for unknown platform in category web applications ============================= CFAGCMS SQL Injection Exploit ============================= Exploit Title: CFAGCMS SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link:...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

CVE-2008-5922

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

CVE-2008-5922

CVE-2008-5922 affects Cant Find A Gaming CMS (CFAGCMS) 1.0 and targets the themes/default/index.php file. It enables a remote file inclusion via the (1) main and (2) right parameters, allowing an attacker to execute arbitrary PHP code. The root cause is PHP RFI in the affected script. Public expl...

CVE-2008-5922

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

Sql injection

SQL injection vulnerability in right.php in Cant Find A Gaming CMS CFAGCMS 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter...

CVE-2008-5781

SQL injection vulnerability in right.php in Cant Find A Gaming CMS CFAGCMS 1.0 Beta 1 allows remote attackers to execute arbitrary SQL commands via the title parameter...

CVE-2008-5781

CVE-2008-5781 describes an SQL injection in Cant Find A Gaming CMS (CFAGCMS) 1.0 Beta 1, exploitable via the title parameter in right.php. Affected component: CFAGCMS 1.0 Beta 1 (right.php); root cause is unsanitized input leading to arbitrary SQL execution. Impact per CVSS v2: partial confidenti...

CFAGCMS 1 SQL Injection

cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ------------------------------------------------------------------ exploi...

CFAGCMS v1 (right.php title) SQL Injection Vulnerability

No description provided by source. cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

CFAGCMS 1 - SQL Injection

CFAGCMS 1 - SQL Injection cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

CFAGCMS 1 - SQL Injection

cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ------------------------------------------------------------------ exploi...

CFAGCMS v1 (right.php title) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== CFAGCMS v1 right.php title SQL Injection Vulnerability ======================================================== cfagcms Beta 1 sql inj. download:...

CFAGCMS Remote File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: CFAGCMS Remote File Inclusion Vendor: http://sourceforge.net/projects/cfagcms/ Bug: Remote File Inclusion Vulnerable Version: 1 Exploitation: Remote with browser Fix: N/A Original Advisory: http://www.bugreport.ir/index58.htm - Description:...