8 matches found
EUVD-2008-2183
Malware in sbrugna...
EUVD-2008-2014
Malware in sbrugna...
EUVD-2008-2015
Malware in sbrugna...
CVE-2008-5853
Chilek Content Management System aka ChiCoMaS 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain database credentials via a direct request for config.inc or 2 read database backups via a request for a backu...
CVE-2008-5853
Chilek Content Management System aka ChiCoMaS 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain database credentials via a direct request for config.inc or 2 read database backups via a request for a backu...
CVE-2008-2186
Cross-site scripting XSS vulnerability in index.php in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2008-2016
PHP remote file inclusion vulnerability in Chilek Content Management System aka ChiCoMaS 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to the default URI under install/. NOTE: this can also be leveraged to include and execute arbitrary local files via...
CVE-2008-2017
The CVE-2008-2017 entry concerns Chilek Content Management System (ChiCoMaS) 2.0.4, where a directory traversal flaw allows remote attackers to include and execute arbitrary local files. The vulnerability arises from a dot-dot sequence (..) in the operation parameter to the default install/ URI. ...